Principal Risk Specialist, Control Testing

Summary:

● To effectively identify, assess, monitor, and mitigate risks within the site consistent with Capital One’s internal controls and policies

General Responsibilities:

● Performance of First Line of Defense Assessments

○ Conducts periodic controls testing

○ Performs Business Area Risk Review / Risk Management and Control Framework / Enterprise Risk Self- Assessment

○ Leads local site audit management

○ Liaises with internal and external auditors to facilitate audit requirements

● Risk and Remediation Monitoring

○ Inputs risk issues and events in GRC

○ Identifies potential risk issues and events and reports appropriate ticket for resolution

○ Participates in the analysis and resolution of risk issues and controls

○ Conducts local site audit remediation

○ Maintains inventory of identified risks, controls, and remediation completion

● Site Risk Management

○ Partners and liaises with Risk counterparts and the management team in implementing sustainable policies and compliance control programs

○ Ensures site awareness of risk management, including but not limited to the following activities:

○ Provides training and assistance to Risk points-of-contact (POCs) and other employees on control procedures

○ Performs periodic testing, control awareness discussions, distribution of control tools (eg. findings database)

○ Cascades respective risk policies and standards relevant to each function

○ Prepares materials for monthly Risk Committee Review meeting

● May be assigned / rotated across related sub-functions including but not limited to sub-functions within Shared Services

● Other job-related duties that may be assigned from time to time

Basic Qualifications:

● Educational Background: Business graduate, preferably with Accounting units

● Professional Experience: 3-5 years’ experience in managing risk and internal controls in Financial industry; Certified internal Auditor

● Skills Required:

○ Understanding of operational risk management framework and techniques;

○ Strong analytical skills to understand risk processes and identify appropriate controls;

○ Effective communication skills to present, negotiate, and influence

○ Sound judgment in recommending and implementing resolutions