# Principal Associate, Cyber Security

**Company**: Capital One
**Experience**: senior
**Job type**: full-time
**Salary**: $161,800 - $184,600 per year
**Category**: Security
**Industry**: Finance

**Apply**: https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Principal-Associate--Cyber-Security_R1003194-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_d79ccd97-9d8

## Description

We are seeking a Principal Associate, Cyber Security to join our team of Information Security specialists. As a Principal Associate, you will partner with internal and external stakeholders to ensure third-party engagements receive the necessary Cyber Third Party Risk Reduction (CTPRR) due diligence. You will evaluate the effectiveness of third-party security environments and deliver high-quality assessment reports.

**Responsibilities:**

- Support kick-off, planning, and scoping activities for cyber-focused risk assessments

- Analyze third-party control environment data against Capital One security expectations

- Review and support the execution and delivery of reports, including executive summaries and work papers

- Maintain relationships with third-party management and other Enterprise colleagues to manage expectations of assessments and remediation

- Work autonomously to assess needs, identify insights, and drive actions forward with stakeholders

- Stay current with industry trends and best practices through participation in external organizations

- Travel 30-40% to perform multi-day assessments

**Basic Qualifications:**

- Bachelor's Degree

- At least 3 years of experience in cybersecurity or information technology

- At least 2 years of experience evaluating, contributing to, or supporting the development of cybersecurity capabilities

**Preferred Qualifications:**

- 3+ years of experience with cybersecurity frameworks and concepts

- 3+ years of experience performing analysis of or developing solutions for cyber threats, vulnerabilities, risks, or events

- 3+ years of experience working on teams and presenting to stakeholders cybersecurity information

- 2+ years of experience in PCI DSS, NIST, ISO, SOC 2, or third-party risk management

- 2+ years of experience working in multi-cloud environments

- 2+ years of experience using security tools

- 1+ years of experience developing or interpreting cybersecurity metrics or dashboards

**Salary:** McLean, VA: $161,800 - $184,600 per year Richmond, VA: $147,100 - $167,900 per year

**Benefits:** Capital One offers a comprehensive, competitive, and inclusive set of health, financial, and other benefits that support your total well-being.

## Skills

### Required
- cybersecurity
- information technology
- risk assessment

### Nice to have
- NIST CSF
- MITRE ATT&CK
- CMMC
- FedRAMP
- PCI DSS
- NIST
- ISO
- SOC 2
- multi-cloud environments
- security tools
- cybersecurity metrics

---

Source: [Apply at capitalone.wd12.myworkdayjobs.com](https://capitalone.wd12.myworkdayjobs.com/en-US/Capital_One/job/McLean-VA/Principal-Associate--Cyber-Security_R1003194-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)