Principal Cyber Security & Risk Transformation

Information Technology Senior Management Forum; McLean (VA); On-site; USD 162,000 - 185,000; Full time

Benefits offered by this job

Health benefits

Competitive compensation

Inclusive benefits

Job summary

Capital One is seeking a Principal Associate, Cyber Security to join our team of security professionals in McLean, VA. You will assess needs, collaborate with executives, and drive governance, capability maturation, and risk transformation across the organization.

The role requires 3+ years in cybersecurity or IT, experience with NIST CSF/MITRE ATT&CK, multi-cloud environments, and the ability to translate technical findings into actionable reports for both technical and non-technical

Qualifications

• Bachelor's degree required.
• At least 3 years in cybersecurity or IT.
• At least 2 years evaluating or supporting cybersecurity capabilities.

Responsibilities

• Assess needs, gain insights, and drive actions with stakeholders for cybersecurity outcomes.
• Evaluate cybersecurity capabilities using the CSF framework and metrics.
• Collaborate with Executives and LOB partners to align capabilities and roadmaps.
• Develop risk and maturity reports for executive and technical audiences.
• Lead portions of capability assessments and document findings clearly.

Skills

Cybersecurity governance

Risk management

NIST CSF

MITRE ATT&CK

Threat intelligence

Stakeholder communication

Multi-cloud experience

Education

Bachelor's degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One is seeking a Principal Associate, Cyber Security to join our team of security professionals in McLean, VA. You will assess needs, collaborate with executives, and drive governance, capability maturation, and risk transformation across the organization.

The role requires 3+ years in cybersecurity or IT, experience with NIST CSF/MITRE ATT&CK, multi-cloud environments, and the ability to translate technical findings into actionable reports for both technical and non-technical