Principal Cyber Security: Third-Party Risk Lead

ITSMF; McLean (VA); On-site; USD 162,000 - 185,000; Full time

Job summary

Capital One seeks a Principal Associate, Cyber Security to guide third party risk assessments, interpret security requirements, and deliver executive-ready reports. You’ll partner with internal and external stakeholders to elevate the CTPRR program and drive remediation actions.

The role requires at least 3 years in cybersecurity or IT, plus experience evaluating cybersecurity capabilities; travel is 30-40% for multi-day assessments.

Qualifications

• Bachelor's Degree.
• 3+ years in cybersecurity or information technology.
• 2+ years evaluating or supporting development of cybersecurity capabilities.

Responsibilities

• Support kick-off, planning and scoping activities for cyber-focused risk assessments.
• Analyze Third Party control environment data against security expectations.
• Review and support execution and delivery of reports with executive summaries and evidence.
• Maintain relationships with Third Party management to manage expectations.
• Stay current with industry trends and best practices.
• Travel 30-40% for multi-day assessments.

Skills

Cybersecurity

Risk assessment

Threat intelligence

Stakeholder comms

Education

Bachelor's Degree

Tools

Splunk

CrowdStrike

Qualys

AWS Security Hub

Job description

Capital One seeks a Principal Associate, Cyber Security to guide third party risk assessments, interpret security requirements, and deliver executive-ready reports. You’ll partner with internal and external stakeholders to elevate the CTPRR program and drive remediation actions.

The role requires at least 3 years in cybersecurity or IT, plus experience evaluating cybersecurity capabilities; travel is 30-40% for multi-day assessments.