Principal Auditor - Risk Management Job at Capital One (New York)

Third Party Risk Management (TPRM) Consultant - Principal

Do you want to boost your career and collaborate with expert, talented colleague...

Location

Poland

Salary:

Not provided

Workable

Expiration Date

Until further notice

Requirements

Extensive experience in Third Party Risk Management (TPRM) and Governance, Risk & Compliance (GRC) at enterprise level
Strong background as Security Assessor, Auditor, and Risk Consultant
Proven experience leading TPRM, vendor risk, and supplier assurance programmes
Experience acting as Project Manager, Delivery Lead, and Programme Lead for complex engagements
Strong knowledge of regulatory and security frameworks: ISO 27001, NIST, SOC2, GDPR, DORA, NIS2, etc.
Hands-on experience with GRC / TPRM platforms, ideally including OneTrust
Ability to design and implement third-party risk frameworks, policies, and governance models
Strong stakeholder management skills at executive and board level
Proven people management experience, including team leadership and mentoring
Ability to balance security, risk, compliance, and business enablement

Job Responsibility

TPRM Proposals & Strategy: Lead the development of TPRM and GRC proposals, defining scope, delivery models, governance structures, and operating models and design enterprise-level Third Party Risk Management strategies aligned with regulatory, operational, and cyber risk requirements
Client Engagement Leadership: Lead and manage complex client engagements in Third Party Risk Management, vendor risk, and GRC and act as engagement lead and trusted advisor for executive stakeholders (CISO, CRO, Risk, Compliance, Procurement, Legal)
ensure successful delivery of TPRM services including assessments, frameworks, tooling, and operationalisation
Security Assessment & Audit Leadership: Lead third-party security assessments, audits, and assurance activities and define assessment methodologies, risk scoring models, control frameworks, and reporting structures
oversee supplier due diligence, onboarding risk processes, and continuous monitoring programmes
Technical & Methodological Authority: Serve as subject matter expert for TPRM, GRC platforms, and vendor risk methodologies and provide leadership in the use of GRC and TPRM tooling (e.g. OneTrust, Archer, ServiceNow GRC, similar platforms)
Framework Design & Governance: Design and implement scalable Third Party Risk frameworks, policies, standards, and operating models and align TPRM frameworks with industry standards and regulatory requirements (e.g. ISO 27001, NIST, SOC2, GDPR, DORA, NIS2)
Project, Delivery & Programme Leadership: Act as Project Manager, Delivery Lead, and Programme Lead for large-scale TPRM initiatives and manage multi-stream delivery, dependencies, risks, and stakeholder alignment
Team Leadership & Management: Lead, mentor, and develop a team of consultants (up to 5 direct reports) and build high-performing delivery teams and ensure capability development in TPRM and GRC
Risk & Compliance Management: Identify, assess, and manage third-party risks across cyber, operational, regulatory, and reputational domains and advise clients on risk treatment strategies, remediation plans, and control improvements

What we offer

Industry-leading compensation and benefits
Top training and development opportunities
Inclusive and entrepreneurial culture
Global reach
Recognized as one of the UK’s top firms by the Financial Times and Forbes
On Germany’s top employers list for 2023
Named on list of Best Firms to Work for by Management Consulting Magazine
Recognized by the Top Employers Institute for exceptional standards in employee conditions across Europe for five years in a row

Senior Internal Auditor

Paying up to £40k, this is an excellent opportunity for a qualified or part qual...

Location

United Kingdom , Gloucestershire

Salary:

40000.00 GBP / Year

Audit & Risk Recruitment

Expiration Date

Until further notice

Requirements

Qualified as an Internal Auditor (CMIIA or CIA) OR you meet the requirements for entry to the CIA qualification programme: 2:1 degree in any discipline, OR Internal Audit Practitioner designation with the last 3 years OR 5 years internal audit experience
Experienced in internal audit delivery
Committed to delivering quality and improvement
A good communicator across all organisational levels
Flexible, with a can-do attitude, and a collaborative approach to working
Interested in professional development and continuous learning

Job Responsibility

To carry out audit reviews without supervision and to a standard as set by the Company, as guided by the Principal Auditor
To be responsible for the mentoring and direct supervision of auditors. This includes monitoring performance and quality and providing advice and guidance, as required. The Senior Auditor, in conjunction with their Assistant Director, will also approve timesheets and authorise leave and expense claims, for the colleagues assigned to them
To initiate the audit process, including meeting with the client manager to discuss the objectives and scope of the audit review
To ensure the design and completion of all aspects of the audit process, including the design of appropriate tests, in respect of every audit to a standard determined by the Company
To ensure a draft audit report is produced in respect of every audit undertaken and within a time scale agreed with the client manager. To ensure that recommendations in audit reports are agreed with client managers including implementation dates of same
To liaise with all levels of management, as required, with regard to the audit process including agreeing recommendations in reports with client managers and agreeing implementation dates of same

What we offer

generous pension and holiday scheme

Fulltime

Head of Audit

Interim Head of Audit for a 12-month fixed-term contract. A fantastic opportunit...

Location

United Kingdom , Southampton

Salary:

Not provided

Audit & Risk Recruitment

Expiration Date

Until further notice

Requirements

A fully qualified auditor (e.g., CCAB, CMIIA, or equivalent) with significant post-qualification experience
Proven experience in leading and managing an internal audit function, ideally within a public sector or similarly complex environment
A strategic thinker with the ability to translate organisational objectives into a risk-based audit plan
Exceptional communication and interpersonal skills, with a proven ability to engage, influence, and build credibility with senior stakeholders
A demonstrable track record of effective team leadership and a passion for developing others
A proactive, forward-thinking individual who is able to drive change and deliver results

Job Responsibility

Provide strategic leadership and direction to the Internal Audit function
Develop, manage, and deliver a comprehensive risk-based annual audit plan
Oversee the delivery of a portfolio of audit assignments to a high standard, ensuring they provide valuable insights
Act as the principal audit advisor, building and maintaining strong, collaborative relationships with the Executive Leadership Team, the Audit Committee, and other senior stakeholders
Lead, mentor, and develop the audit team as well as managing the co-source function
Prepare and present clear, concise, and impactful reports to the Audit Committee and senior management
Champion best practices in internal audit, governance, and risk management across the organisation

Principal Auditor - Cyber, Risk and Analysis Technology Audit

Capital One is seeking an energetic, self-motivated Principal Technology Auditor...

Location

United States , McLean, Virginia; Chicago, Illinois; Richmond, Virginia; Plano, Texas; New York, New York; Riverwoods, Illinois; Charlotte, North Carolina

Salary:

119400.00 - 163500.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or military experience
At least 4 years of experience in information technology (operations, software delivery, access management, microservices), information security (application security, network security, cyber security, data protection), information systems risk management, information systems auditing, or a combination
At least 1 year of experience in cloud computing and controls (design, operation, risk management, or auditing)
At least 2 years of experience in managing components of audit engagements, project management or a combination
At least 2 years of experience in analyzing data extracts to identify trends, patterns, and anomalies, including 1 year of experience in test scripting or coding (writing, reviewing, assessing)

Job Responsibility

Execute major components of audits, including critical technology functions, cloud-based infrastructure, cybersecurity, risk management, application, and third-party management, as well as the ability to assist in leading components of small to medium size audits
Perform risk assessments of business units and technology operations, design and execute audit procedures to verify the effectiveness of existing controls, identify and define issues, review and analyze evidence, and document client processes and procedures
Understand the broader context and implications (e.g., financial, legal, reputational, etc.) of the various types of risk affecting the business and critical technology functions
Establishes and maintains good client relations during engagements. Communicates or assists in communicating the results of some audit projects to management via written reports and oral presentations
Identify expectations of the client and take actions to support the client experience
Prepare clear, organized and complete documentation to support work performed
Self prioritize and effectively plan own work activities managing multiple priorities and tasks across the team to deliver quality results
Coordinate with others and proactively take on additional work
Deliver appropriate, succinct and organized information, tailoring communication style to audience
Effectively communicate information, issues and audit progress to teammates, clients and auditor-in-charge

What we offer

comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)

Fulltime

Principal Auditor (Experienced Senior Auditor), Global Payment Network

Capital One is seeking an energetic, self-motivated Principal Auditor interested...

Location

United States , Riverwoods; Chicago; McLean; Plano; New York; Charlotte

Salary:

119400.00 - 163500.00 USD / Year

Capital One

Expiration Date

Until further notice

Requirements

Bachelor’s Degree or military experience
At least 3 years of experience in internal or external auditing, accounting, financial analysis, information systems, compliance, risk management or a combination
At least 3 years of experience in global payment network operations and banking or financial services, or a combination

Job Responsibility

Plan, perform, and lead large/complex audits at the enterprise level as well as other diverse lines of business and specialty areas
Perform risk assessments of business activities, potential exposures and materiality of loss
Design and perform audit procedures, including identifying and defining issues, reviewing and analyzing evidence, and documenting processes
Leverage available data and analytical tools during the planning, fieldwork, and reporting phases of audit delivery
Effectively review and compile relevant, material findings and recommendations into readable and concise audit reports
Communicate the results of audit projects to management via written reports and compelling oral presentations
Provide significant input into the development of the annual audit plan
Design and execute internal control testing for standardized operations of moderate complexity with more than one component, including finance, IT, compliance, credit, security
Provide risk management advice and counsel to business leadership on best practices
Establish and maintain good working relationships with line management and auditees during engagements

What we offer

comprehensive, competitive, and inclusive set of health, financial and other benefits that support your total well-being
performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI)

Fulltime

New

Senior Auditor

The post holder will fulfil an important role within a team providing internal a...

Location

United Kingdom

Salary:

31049.00 - 37796.00 GBP / Year

Cumbria, Northumberland, Tyne and Wear NHS...

Expiration Date

February 17, 2026

Requirements

Good standard of education to A level or equivalent
Working towards C.C.A.B / CMIIA qualification or equivalent experience
At least 2 years internal audit experience preferably public sector
Public Sector Internal Audit Standards
Good knowledge of Internal Audit methods and techniques, inc Risk Based Audit
Good knowledge of the principles of finance and non financial NHS areas
Nolan principles
Risk based internal audit
Microsoft products (word / excel etc)
IT Skills. Be literate and efficient in the use of a variety of computer systems and software

Job Responsibility

To evaluate and test existing client practices and procedures to review whether they are effectively controlled to mitigate identified risks, and to determine if there are more efficient ways of working
To support in the delivery of an effective, high quality internal audit service by helping management improve systems of internal control, reducing the potential effects of significant risks
The post holder will work with Senior Internal Audit Managers and Principal Auditors to gain acceptance of recommendations by client managers
The post holder will display conformance to The AuditOne Way at all times

What we offer

Flexible working

!

Principal Supplier Quality Engineer

This position provides technical leadership for Supplier Quality Management proc...

Location

United States

Salary:

Not provided

Avanos

Expiration Date

Until further notice

Requirements

Personnel performing work affecting product quality shall be competent based on appropriate education, training, skills and experience.
B.S. in Engineering, Science, Business, or another relevant field
Minimum of 10 years of collective experience in a Research, Manufacturing, Quality and/or Regulatory Affairs function within a medical device, pharmaceutical, biologic, or other highly regulated industry.
Supplier Quality Engineering experience in the Medical Device industry
Strong understanding of Risk Management principles and techniques.
Knowledge of Statistical Techniques
Experience in root cause analysis and failure investigation tools
Working knowledge of the MDSAP Single Audit program including the regulations for US, Japan, Canada, Australia, and Brazil
Working knowledge of the key medical device compliance related standards such as ISO 13485, ISO 14971, ISO 19011, ISO 10993, etc.
Certification as CQA, CBA, MDA, or ISO 13485 Lead Auditor

Job Responsibility

Ensure conformance to industry practices, domestic and international regulatory requirements and established company procedures.
Provide global technical leadership in the development and implementation of quality and regulatory compliance strategies and best practices to ensure the manufacturing and distribution of products comply with applicable regulatory requirements.
Lead cross-functional collaboration with Procurement, R&D/Operations, Technical Quality, and Logistics teams to address quality issues at contract manufacturers and suppliers.
Establish and administer the supplier audit program for quality/regulatory compliance.
Maintain the Approved Supplier List (ASL).
Support the Global Supplier Review Board, including providing metrics for supplier assessments.
Actively engage with suppliers in the event of a supplier issue requiring corrective action or upcoming external audits.
Provide guidance as needed for corrective action required because of assessment findings.
Execute supplier audits in accordance with approved schedules.
Support documentation of supplier changes through the supplier notification, change management, QNC, or CAPA processes.

What we offer

comprehensive and competitive range of benefits
Total Rewards package
pay
health care benefits
retirement plans
work/life benefits
generous 401(k) employer match of 100% of each pretax dollar you contribute on the first 4% and 50% of the next 2% of pay contributed with immediate vesting
benefits on day 1
free onsite gym
onsite cafeteria

Associate Director – Relationship Management

The Associate Director– Relationship Management will be an integral part of the ...

Location

Luxembourg , Luxembourg

Salary:

Not provided

Waystone Governance Ltd.

Expiration Date

Until further notice

Requirements

Motivated with enhanced interpersonal skills and adept at building client relationships
Minimum 10 years’ experience in an investment funds environment
Knowledge of AIFMD, UCITS and MiFID
Client facing background with strong communication, leadership, and presentation skills
Commercially aware with strong client service, problem solving skills and cross sell mindset
Strong academic background including a Degree in Finance/Business/Economics or related field
Strong IT skills including MS Office (Word, Excel, PowerPoint, etc.)

Job Responsibility

Management of client relationships and ongoing governance of funds dealing with internal Conducting Officers and supporting teams, and being lead contact person with Fund Boards, Investment Managers and across the different service providers, principally the Fund Administrator, Depositary, Auditors and Legal Advisors
Expertise within Luxembourg domiciled UCITS and AIF funds but also understanding and interest in other Waystone products and domiciles elsewhere in the Waystone group which clients may avail of
Identification and management of the relationship to ensure they remain operationally efficient and financially profitable. Includes ongoing interaction with internal teams, Conducting Officers persons and extended parties to manage ongoing deliverables, ad hoc matters, and project related items
Ensure current knowledge of regulations and updates as and when they are circulated by reading and implementing processes to adhere to this changing regulation, specifically AIFMD, UCITS and MiFID
Preparation of Manco/AIFM report on time and board meeting presentation
Action items reviewed and resolved in advance of Board meeting
Attend, when available, training sessions on relevant topics and ensure all teams are onboard with the changing environment
Communicate all relationship and governance items to Conducting officers and internal management, and internal teams and work towards resolutions & log for training purposes to avoid duplication of issues
Operational and relationship responsibility for a group of current clients in line with all fund documentation including prospectus, legal agreements and in line with Waystone procedures, with the support of Conducting Officers, Risk Management, Compliance and Operational Risk, to ensure client satisfaction and compliance with regulatory obligations
Identify procedures that need to be implemented or changed, lead the charge to get the changes made, take responsibility for training, and ensure that procedures are adhered to on an ongoing basis

Fulltime

Principal Auditor - Risk Management

Capital One

Location:
United States , New York ▼
Chicago
Richmond
McLean
Plano
Riverwoods
Charlotte

Category:
Finance

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 30, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Principal Auditor - Risk Management