Principal Associate, Cyber Security

Capital One

. Support kickoff, planning, and scoping for cyber-focused risk assessments .

Posted 10/21/2026full-timeMcLean • Virginia • United StatesMid-Level💰 $147,100 - $184,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity frameworks such as NIST CSF, MITRE ATT&CK, and CMMC, with a strong ability to analyze third-party risks and develop actionable insights. Proficient in managing stakeholder expectations and delivering comprehensive assessment reports while maintaining relationships across cross-functional teams.

Highest-signal resume keywords

Cybersecurity FrameworksRisk ManagementThird-Party Risk ManagementSecurity ToolsIncident Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk AssessmentVulnerability AnalysisCybersecurity MetricsSecurity Incident Analysis

Soft Skills

Stakeholder CommunicationCross-Functional CollaborationExpectation Management

Tools & Technologies

SplunkCrowdStrikeQualysAWS Security Hub

Industry Keywords

NISTPCI DSSISOSOC 2FedRAMPCMMCCyber ThreatsGovernance Processes

Tech Stack

Tools & technologies

AWSCloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Support kickoff, planning, and scoping for cyber-focused risk assessments
Work with cross-functional resources to understand operational and technical aspects of third-party engagement service models
Analyze third-party control environment data against Capital One security expectations
Interpret information security requirements and apply them to specific situations
Review and support execution and delivery of assessment reports, executive summaries, and work papers
Document assessment work completed, evidence reviewed, and identified gaps
Maintain relationships with third-party management and enterprise colleagues
Manage expectations regarding assessments, remediation, timing, and deliverables
Assess needs, identify insights, and drive actions forward with stakeholders
Stay current with industry trends and best practices through external organizations
Bring recommendations back to the team and support program development
Travel 30–40%, including off-site locations, for multi-day assessments

Requirements

What you’ll need

Bachelor's Degree
At least 3 years of experience in cybersecurity or information technology
At least 2 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
3+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, and FedRAMP
3+ years of experience analyzing or developing solutions for cyber threats, vulnerabilities, risks, or events
3+ years of experience working on teams and presenting cybersecurity information to stakeholders
2+ years of experience in PCI DSS, NIST, ISO, SOC 2, or third-party risk management
2+ years of experience working in multi-cloud environments
2+ years of experience using security tools such as Splunk, CrowdStrike, Qualys, or AWS Security Hub
1+ years of experience developing or interpreting cybersecurity metrics or dashboards
Familiarity with industry governance or financial governance processes
Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies
Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support

Benefits

Comp & perks

Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI)
Comprehensive health, financial, and other benefits supporting total well-being