Principal Technical Risk Analyst

Navy Federal Credit Union; Vienna (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive pay

Benefits package

Career development

Job summary

Navy Federal Credit Union is seeking a senior Risk and Control SME to interpret and develop solutions for complex cross-department IT risk and control challenges. This role operates independently and advises senior management while mentoring analysts.

You will lead risk assessments, create defensible testing results, align controls to ISO/NIST/COSO standards, and collaborate with Internal Audit, ICFR, Compliance, and Security to ensure audit readiness.

Qualifications

• Extensive experience in technical risk management, control testing, cybersecurity, or IT governance, operating independently as a recognized expert.

Responsibilities

• Interpret and develop solutions to complex, cross functional technical risk and control challenges, delivering significant and measurable impact across the enterprise.
• Independently lead moderate to large risk and control assessments and initiatives, managing multiple, simultaneous, high impact engagements from planning through delivery.
• Elevate control testing to audit level granularity, ensuring program maturity, audit readiness, and end to end control identification beyond standard methodology.
• Influence and drive control design decisions, providing embedded senior oversight and challenging assumptions to structure audit defensible controls.
• Develop, enhance, and standardize practices, procedures, templates, and instructions that are adopted across teams and referenced by other groups.
• Drive consistency, standardization, and rationalization of controls across assessments, aligning documentation to Information Security, ETP, and applicable regulatory standards.
• Translate complex technical processes and system behavior into clear, audit aligned control language for both technical and business stakeholders.
• Serve as the recognized technical SME on Enterprise Technology Services processes in complex environments.
• Lead engagements by providing risk assessments, control walkthroughs, compliance documentation, and defensible testing results.
• Partner with second line risk, Internal Audit, ICFR, Compliance, and Security to ensure holistic risk management and reliable, reusable control results.
• Mentor and develop analysts at all levels, building a pipeline of talent, transferring knowledge, and raising the overall capability of the risk function.
• Facilitate workshops, walkthroughs, and training sessions that enhance risk awareness and promote best practices across the program.
• Continuously evaluate and enhance risk and control frameworks, tools, and methodology to keep pace with an evolving technology and threat landscape.
• Anticipate and proactively address issues, communicate courageously, and adapt to feedback to ensure deliverables exceed expectations for all stakeholders.
• Promote a culture of proactive, audit aligned risk management throughout the organization and role model the Leadership Model in all interactions.

Skills

Technical risk mgmt

Cross-department projects

Audit readiness

Regulatory compliance

Risk frameworks

IT systems knowledge

Mentoring analysts

Communication skills

Senior stakeholder collaboration

Education

Bachelor's degree in IT/CS/Risk

Master’s degree in related field

CISSP

CRISC

CISA

PMP

Tools

IAM

ISO/NIST/COSO

Cloud platforms

Job description

Overview

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Serves as the highest-level individual contributor responsible for interpreting and developing solutions to complex, cross departmental technical risk and control challenges with significant organizational impact. Operates independently and is recognized as a subject matter expert (SME) across the organization’s IT and operational environments. Leads moderate to large risk and control initiatives, drives standardization and audit alignment, and influences how controls are designed, structured, and tested across the enterprise. Works with senior management and second and third-line partners to elevate the maturity, quality, and defensibility of the risk and control program, while mentoring analysts at all levels, reviewing documentation and enhancing team practices, procedures, and methodology.

Responsibilities

• Interpret and develop solutions to complex, cross functional technical risk and control challenges, delivering significant and measurable impact across the enterprise.
• Independently lead moderate to large risk and control assessments and initiatives, managing multiple, simultaneous, high impact engagements from planning through delivery.
• Elevate control testing to audit level granularity, ensuring program maturity, audit readiness, and end to end control identification beyond standard methodology.
• Influence and drive control design decisions, providing embedded senior oversight and challenging assumptions to structure audit defensible controls.
• Develop, enhance, and standardize practices, procedures, templates, and instructions (e.g., walkthrough note standards, precision and methodology guidance) that are adopted across teams and referenced by other groups.
• Drive consistency, standardization, and rationalization of controls across assessments, aligning documentation to Information Security, ETP, and applicable regulatory standards.
• Translate complex technical processes and system behavior into clear, audit aligned control language for both technical and business stakeholders.
• Serve as the recognized technical SME on Enterprise Technology Services processes in complex environments.
• Lead engagements by providing risk assessments, control walkthroughs, compliance documentation, and defensible testing results.
• Partner with second line risk, Internal Audit, ICFR, Compliance, and Security to ensure holistic risk management and reliable, reusable control results.
• Mentor and develop analysts at all levels, building a pipeline of talent, transferring knowledge, and raising the overall capability of the risk function.
• Facilitate workshops, walkthroughs, and training sessions that enhance risk awareness and promote best practices across the program.
• Continuously evaluate and enhance risk and control frameworks, tools, and methodology to keep pace with an evolving technology and threat landscape.
• Anticipate and proactively address issues, communicate courageously, and adapt to feedback to ensure deliverables exceed expectations for all stakeholders.
• Promote a culture of proactive, audit aligned risk management throughout the organization and role model the Leadership Model in all interactions.

Qualifications

• Extensive experience in technical risk management, control testing, cybersecurity, or IT governance, operating independently as a recognized expert.
• Demonstrated ability to lead moderate to large, cross departmental projects and initiatives with significant organizational impact.
• Advanced, hands‑on experience designing, documenting, and testing controls (including TOD/TOE), sampling/population management, and evidence alignment in accordance with established methodologies.
• Expert knowledge of risk management principles and frameworks (e.g., ISO, NIST, COSO) and regulatory compliance requirements for financial institutions.
• Advanced understanding of IT systems, network architecture, cloud technologies, IAM, endpoint, configuration management, and cybersecurity, etc.
• Proven experience aligning control documentation to Information Security and enterprise technology (ETP) standards, and to internal/external audit expectations.
• Demonstrated ability to develop and enhance practices, procedures, templates, and training that are adopted across teams.
• Excellent analytical, problem solving, and decision‑making skills, with the ability to navigate ambiguity and challenge assumptions.
• Strong interpersonal and communication skills, with the ability to translate complex technical risk concepts for senior management and non-technical stakeholders.
• Recognized ability to mentor and develop staff at all levels and to build strong cross‑functional relationships with business and senior partners.
• Bachelor's degree in information technology, Computer Science, Risk Management, or a related field, or an equivalent combination of training, education, and experience.

Desired Qualifications

• Master’s Degree in related field or equivalent combination of training, education and experience
• Certified Information Systems Security Professional (CISSP)
• Certified Risk and Information Systems Control (CRISC)
• Project Management Professional (PMP)
• Certified Information Systems Auditor (CISA)

Hours

Monday - Friday, 8:00AM - 4:30 PM

Additional Information

• Monday - Friday, 8:00AM - 4:30 PM

Locations

• 820 Follin Lane, Vienna, VA 22180
• 5510 Heritage Oaks Drive, Pensacola, FL 32526

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE 100 Best Companies to Work For 2026
• Yello and WayUp Top 100 Internship Programs 2025
• Computerworld Best Places to Work in IT 2026
• Most Loved Workplace – America’s Top Most Loved Workplaces 2025
• 2025 PEOPLE Companies That Care
• Newsweek Most Trustworthy Companies in America 2026
• Military Times 2025 Best for Vets Employers
• Forbes 2026 America's Best Large Employers
• Forbes 2025 America's Best Employers for New Grads
• Forbes 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
• Military.com Top Military Spouse Employers 2025
• 2026 Handshake Early Talent Award
• Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026

From Fortune Magazine.

All rights reserved.

Equal Employment Opportunity

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [e-mail] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.

Disclaimers

Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.

Protect Yourself from Job Scams

Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.

Bank Secrecy Act

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.