Cyber Security Leader: Governance & Risk Maturity

Capital One; McLean (VA); On-site; USD 162,000 - 185,000; Full time

Job summary

Capital One in McLean, VA seeks a Principal Associate, Cyber Security to autonomously assess needs, drive actions with stakeholders, and mature cyber capabilities. You will evaluate CSF implementations, collaborate with executives and LOB partners, and produce actionable risk and maturity insights.

The role emphasizes governance, reporting, and cross-domain coordination. Ideal candidates have 3+ years in cybersecurity, with experience in CSF, MITRE ATT&CK, and cloud security tools, plus strong

Qualifications

• Bachelor’s degree required.
• 3+ years in cybersecurity or information technology.
• 2+ years evaluating or supporting development of cybersecurity capabilities.
• 3+ years with frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP.

Responsibilities

• Assess needs, identify insights, and drive actions with stakeholders.
• Evaluate cybersecurity capabilities and measure effectiveness via CSF.
• Collaborate with executives and LOB partners on capabilities and roadmaps.
• Enrich cybersecurity data from multiple streams for insights.
• Monitor capabilities and track progress toward maturity.
• Lead portions of assessments with clear documentation for stakeholders.
• Develop risk and maturity reports for executive and technical audiences.
• Coordinate governance, metrics, and reporting across domains.

Skills

Threat intel

Risk mgmt

NIST CSF

MITRE ATT&CK

Stakeholder comms

Incident analysis

Education

Bachelor’s degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One in McLean, VA seeks a Principal Associate, Cyber Security to autonomously assess needs, drive actions with stakeholders, and mature cyber capabilities. You will evaluate CSF implementations, collaborate with executives and LOB partners, and produce actionable risk and maturity insights.

The role emphasizes governance, reporting, and cross-domain coordination. Ideal candidates have 3+ years in cybersecurity, with experience in CSF, MITRE ATT&CK, and cloud security tools, plus strong