Principal Risk Associate, Operational Risk Management Control Testing

Capital One Capital One · Banking · Richmond, VA

This role focuses on operational risk management and control testing within a financial institution. The primary responsibilities include performing testing of operational controls, documenting results, drafting reports, and providing effective challenge to business partners. It involves data analysis for trending and problem identification, and identifying emerging risks. The role requires experience in audit or risk management and familiarity with regulatory requirements.

What you'd actually do

  1. Perform testing on identified operational risk controls to provide assurance that risk-taking groups are appropriately representing their control environments through the effective challenge of operational controls
  2. Ensure issues are properly reported to business areas and remediated appropriately to reduce outstanding risk or performance breakdowns
  3. Perform and support detailed data analysis to include trending, problem identification, and development/completion of remediation projects
  4. Identify emerging risks, process improvements, or areas for increased training through the analysis of testing results
  5. Manage work across organizational lines to achieve results and manage competing priorities

Skills

Required

  • High school diploma, GED, or equivalent certification
  • At least 3 years of audit or risk management experience
  • At least 1 year of testing or quality assurance experience

Nice to have

  • Bachelor’s Degree in Auditing, Finance, Economics, Planning, Information Systems or Business Administration
  • 4+ years of audit or risk management experience
  • 1+ years of project or process management experience
  • Experience with payment transaction flows (Authorization, Clearing, Settlement, Reconciliation
  • Risk Management Certification
  • Familiarity with Federal Financial Institutions Examination Council (FFIEC) and The Office of the Comptroller of the Currency (OCC) regulatory requirements as it relates to technology and operational resiliency
  • Experience in Microsoft Office or Google Suite

What the JD emphasized

  • independent testing
  • effective challenge
  • analysis of testing results