Cyber Risk & Third-Party Security Lead

Capital One; McLean (VA); On-site; USD 162,000 - 185,000; Full time

Job summary

Capital One is seeking a Principal Associate in Cyber Security to lead third-party risk assessments and ensure due diligence across engagements. You will evaluate third-party security environments, produce executive summaries, and collaborate with internal and external stakeholders to improve program efficiency.

The role requires at least 3 years in cybersecurity/IT, 2 years in evaluating cybersecurity capabilities, and willingness to travel up to 40%. A Bachelor's degree is required.

Qualifications

• Bachelor's degree required.
• 3+ years in cybersecurity or information technology.
• 2+ years evaluating or supporting development of cybersecurity capabilities.

Responsibilities

• Support kick-off, planning and scoping activities for cyber-focused risk assessments with cross-functional resources.
• Analyze Third Party control environment data against Capital One security expectations and apply requirements to situations.
• Review and support execution and delivery of reports with evidence and identified gaps.
• Maintain relationships with Third Party management and Enterprise colleagues for assessment deliverables and remediation.
• Work autonomously to assess needs, identify insights, and drive actions.
• Stay current with industry trends and best practices to support program development.
• Travel 30-40% for multi-day assessments.

Skills

Cybersecurity

Risk assessment

Stakeholder engagement

Multi-cloud

Security tools

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Principal Associate in Cyber Security to lead third-party risk assessments and ensure due diligence across engagements. You will evaluate third-party security environments, produce executive summaries, and collaborate with internal and external stakeholders to improve program efficiency.

The role requires at least 3 years in cybersecurity/IT, 2 years in evaluating cybersecurity capabilities, and willingness to travel up to 40%. A Bachelor's degree is required.