Capital One
Principal Associate, Cyber Security
$147K–$185K
McLean, VA +1 · Principal · Full-time · Posted Oct 21, 2026
- Location
- McLean, VA
Richmond, VA - Experience
- At least 3 years in cybersecurity or information technology and at least 2 years evaluating, contributing to, or supporting development of cybersecurity capabilities.
- Education
- Bachelor's Degree
- Visa sponsorship
- Capital One will not sponsor a new applicant for employment authorization or provide immigration-related support for this position.
About the job
Conduct cyber-focused third-party risk assessments, evaluate vendors’ security controls, and deliver assessment reports and remediation guidance.
What you'll do
- Plan and scope assessments with internal and external stakeholders, considering the third party’s operational and technical service model.
- Assess third-party control data against Capital One security expectations and document evidence, gaps, and findings in reports.
- Manage stakeholder relationships and assessment or remediation expectations; identify insights and drive process improvements.
What they ask for
- Bachelor's Degree
- At least 3 years of experience in cybersecurity or information technology
- At least 2 years of experience evaluating, contributing to, or supporting development of cybersecurity capabilities
Nice to have
- 3+ years of experience with cybersecurity frameworks and concepts such as NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, etc.
- Experience with risk management concepts, including identifying threats, assessing vulnerabilities, and recommending mitigation strategies.
Pay
$161,800 - $184,600 USD (base salary); $147,100 - $167,900 USD (base salary)
Tools
NIST CSF, MITRE ATT&CK, CMMC, FedRAMP, PCI DSS, NIST, ISO, SOC 2
Model-written summary · the original posting is authoritative