Senior Technical Risk Analyst

Navy Federal Credit Union; Vienna (VA); On-site; USD 132,000 - 181,000; Full time

Job summary

Navy Federal Credit Union seeks a Senior Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. You will serve as a trusted advisor to business and technology leaders, driving security strategy and governance.

Responsibilities include shaping risk frameworks, coordinating cross-functional teams, and delivering executive-level status reports. A strong leadership presence and extensive experience in risk management are required.

Qualifications

• Bachelor's degree in information security, cybersecurity, IT, engineering, or related field.
• 10+ years in information security, risk, or governance across multiple domains.
• In senior leadership, 5+ years leading security/regulatory projects in several domains.

Responsibilities

• Lead large-scale information security, technology risk, and regulatory projects.
• Drive end-to-end delivery, governance, reporting, and stakeholder management.
• Partner with security, audit, compliance, legal, and business teams to mitigate risks.
• Develop risk management frameworks, governance processes, and remediation plans.
• Lead cross-functional teams through complex security initiatives across units.
• Present executive-level status, risks, and mitigation metrics.

Skills

Information Security

Risk Management

Regulatory Compliance

Leadership

Executive Communication

Stakeholder Management

Threat & Vulnerability Assessment

Education

Bachelor's degree in Information Security or related field

Tools

Azure DevOps

SharePoint

Microsoft 365

Job description

We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.

The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.

Responsibilities

• Lead large-scale information security, technology risk, and regulatory project and remediation initiatives across the enterprise.
• Drive end-to-end project and program delivery, including planning, execution, governance, reporting, and stakeholder management.
• Partner with technology, security, audit, compliance, legal, and business teams to identify and mitigate cybersecurity and operational risks.
• Develop and implement risk management strategies, frameworks, and governance processes.
• Lead cross-functional teams through complex security initiatives involving multiple business units and technology organizations.
• Assess emerging threats, vulnerabilities, and regulatory requirements, and translate findings into actionable remediation plans.
• Prepare and present executive-level reporting on program status, risks, mitigation strategies, and performance metrics.
• Support regulatory examinations, audits, and risk assessments by providing leadership, documentation, analysis, and remediation oversight.
• Establish project governance standards, success metrics, and accountability frameworks.
• Influence senior leaders and stakeholders to align priorities, secure resources, and drive successful outcomes.
• Promote continuous improvement of information security, risk management, and project delivery practices.
• Mentor and develop team members while fostering a culture of accountability, collaboration, and excellence.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
• 10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
• In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas:
  • Identity and Access Management (IAM)
  • Security Operations
  • Vulnerability Management
  • Third-Party Risk Management (TPRM)
  • Cloud Security
  • Security Governance
  • Cyber Risk Management
  • Regulatory Compliance
  • Data Protection
  • Zero Trust Architecture
• Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
• Advanced knowledge of information security principles, controls, and industry best practices.
• Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities.Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
• Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
• Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
• Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
• Exceptional written, verbal, and presentation skills, including communication with executive leadership.
• At least one Information Security Professional certification such as:
  • CISSP
  • CISM
  • CRISC
  • CISA
• Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
• Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.

Desired Qualifications

• Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
• Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
• At least one Project Management Professional Certification such as:
  • PMP
  • PMI-ACP
  • CSM
  • SAFe
• Experience leveraging AI tools and technologies.
• Familiarity with navigating and utilizing ServiceNow

Hours:

Monday - Friday, 8:00AM - 4:30PM

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE100 Best Companies to Work For® 2026
• Yello and WayUp Top 100 Internship Programs 2025
• Computerworld® Best Places to Work in IT 2026
• Most Loved Workplace - America's Top Most Loved Workplaces® 2025
• Newsweek Most Trustworthy Companies in America 2026
• Military Times 2025 Best for Vets Employers
• Forbes® 2026 America's Best Large Employers
• Forbes® 2025 America's Best Employers for New Grads
• Forbes® 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
• Military.com Top Military Spouse Employers 2025
• 2026 Handshake Early Talent Award
• Newsweek America's Greatest Workplaces for Culture, Belonging and Community 2026

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations:

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [e-mail] or by calling 1-888-503-6013 . This team cannot provide any information on job postings or application status.

Disclaimers:

Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.

Bank Secrecy Act:

Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

Job Info

• Job Identification 33142
• Job Category Information Security Risk
• Degree Level Bachelor's Degree
• Job Schedule Full time
• Job Shift Regular Hours
• Targeted Salary Range $131,800 - $181,200 annually