Senior Technical Risk Analyst

Navy Federal Credit Union; Vienna (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Navy Federal Credit Union seeks an experienced Senior Technical Risk Analyst to lead cybersecurity, risk, compliance, and remediation initiatives enterprise-wide. The role requires deep technical risk expertise and a proven ability to drive large-scale projects from initiation through implementation.

The ideal candidate serves as a trusted advisor to business and technology leaders, influencing stakeholders and delivering executive-level reporting on risk, mitigation, and program performance.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, CS, Engineering or related field.
• 10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple domains.
• 5+ years in senior leadership leading technology, cybersecurity, risk or regulatory projects in multiple areas listed.
• Experience partnering with stakeholders across Security, Audit, Compliance, Risk, Regulatory, and Issue Management.
• Advanced knowledge of information security principles, controls, and industry best practices.
• Experience supporting audits, examinations, and regulatory remediation; translate findings into remediation strategies.
• Ability to develop and maintain program documentation and executive-facing deliverables.
• Strong ability to challenge practices, identify weaknesses, and drive improvements.
• Skilled at influencing outcomes and facilitating critical discussions with leadership.
• One or more Information Security certifications (CISSP, CISM, CRISC, or CISA).
• Experience applying NIST, ISO 27001, COBIT, FFIEC or similar frameworks.
• Experience using Azure DevOps, SharePoint, and Microsoft 365 tools.

Responsibilities

• Lead large-scale information security, technology risk, and regulatory projects enterprise-wide.
• Drive end-to-end delivery including planning, governance, reporting, and stakeholder management.
• Partner with technology, security, audit, compliance, legal, and business teams to mitigate risks.
• Develop risk management strategies, frameworks, and governance processes.
• Lead cross-functional teams through complex security initiatives across units.
• Assess emerging threats and regulatory requirements, translate into remediation plans.
• Prepare executive-level reporting on status, risks, and mitigation metrics.
• Support regulatory examinations and risk assessments with leadership and remediation oversight.
• Establish governance standards, metrics, and accountability frameworks.
• Influence senior leaders to align priorities and secure resources.
• Promote continuous improvement of information security and project delivery practices.
• Mentor team members and foster accountability and collaboration.

Skills

IAM

Security Operations

Vulnerability Management

Third-Party Risk Management

Cloud Security

Security Governance

Cyber Risk Management

Regulatory Compliance

Data Protection

Zero Trust Architecture

Education

Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent

CISSP

CISM

CRISC

CISA

Tools

Azure DevOps

SharePoint

Microsoft 365

Job description

Overview

We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.

The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.

Responsibilities

• Lead large-scale information security, technology risk, and regulatory project and remediation initiatives across the enterprise.
• Drive end-to-end project and program delivery, including planning, execution, governance, reporting, and stakeholder management.
• Partner with technology, security, audit, compliance, legal, and business teams to identify and mitigate cybersecurity and operational risks.
• Develop and implement risk management strategies, frameworks, and governance processes.
• Lead cross-functional teams through complex security initiatives involving multiple business units and technology organizations.
• Assess emerging threats, vulnerabilities, and regulatory requirements, and translate findings into actionable remediation plans.
• Prepare and present executive-level reporting on program status, risks, mitigation strategies, and performance metrics.
• Support regulatory examinations, audits, and risk assessments by providing leadership, documentation, analysis, and remediation oversight.
• Establish project governance standards, success metrics, and accountability frameworks.
• Influence senior leaders and stakeholders to align priorities, secure resources, and drive successful outcomes.
• Promote continuous improvement of information security, risk management, and project delivery practices.
• Mentor and develop team members while fostering a culture of accountability, collaboration, and excellence.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
• 10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
• In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas:
• Identity and Access Management (IAM)
• Security Operations
• Vulnerability Management
• Third-Party Risk Management (TPRM)
• Cloud Security
• Security Governance
• Cyber Risk Management
• Regulatory Compliance
• Data Protection
• Zero Trust Architecture
• Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
• Advanced knowledge of information security principles, controls, and industry best practices.
• Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities. Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
• Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
• Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
• Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
• Exceptional written, verbal, and presentation skills, including communication with executive leadership.
• At least one Information Security Professional certification such as:
• CISSP
• CISM
• CRISC
• CISA
• Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
• Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.

Desired Qualifications

• Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
• Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
• At least one Project Management Professional Certification such as:
• PMP
• PMI-ACP
• CSM
• SAFe
• Experience leveraging AI tools and technologies.
• Experience utilizing Microsoft Power Platform
• Familiarity with navigating and utilizing ServiceNow

Additional Information

• Monday - Friday, 8:00AM - 4:30PM

Location

• 820 Follin Lane, Vienna, VA 22180

About Us

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• FORTUNE 100 Best Companies to Work For® 2026
• Yello and WayUp Top 100 Internship Programs 2025
• Computerworld® Best Places to Work in IT 2026
• Most Loved Workplace – America’s Top Most Loved Workplaces® 2025
• 2025 PEOPLE® Companies That Care
• Newsweek Most Trustworthy Companies in America 2026
• Military Times 2025 Best for Vets Employers
• Forbes® 2026 America's Best Large Employers
• Forbes® 2025 America's Best Employers for New Grads
• Forbes® 2025 America's Best Employers for Tech Workers
• 2025 RippleMatch Campus Forward Award Winner for Overall Excellence
• Military.com Top Military Spouse Employers 2025
• 2026 Handshake Early Talent Award
• Newsweek America’s Greatest Workplaces for Culture, Belonging and Community 2026

From Fortune Magazine. © 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity:

All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.

Accommodations:

If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at [e-mail] or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.