Overview We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.
The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.
Responsibilities - Lead large-scale information security, technology risk, and regulatory project and remediation initiatives across the enterprise.
- Drive end-to-end project and program delivery, including planning, execution, governance, reporting, and stakeholder management.
- Partner with technology, security, audit, compliance, legal, and business teams to identify and mitigate cybersecurity and operational risks.
- Develop and implement risk management strategies, frameworks, and governance processes.
- Lead cross-functional teams through complex security initiatives involving multiple business units and technology organizations.
- Assess emerging threats, vulnerabilities, and regulatory requirements, and translate findings into actionable remediation plans.
- Prepare and present executive-level reporting on program status, risks, mitigation strategies, and performance metrics.
- Support regulatory examinations, audits, and risk assessments by providing leadership, documentation, analysis, and remediation oversight.
- Establish project governance standards, success metrics, and accountability frameworks.
- Influence senior leaders and stakeholders to align priorities, secure resources, and drive successful outcomes.
- Promote continuous improvement of information security, risk management, and project delivery practices.
- Mentor and develop team members while fostering a culture of accountability, collaboration, and excellence.
Qualifications - Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
- 10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
- In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas:
- Identity and Access Management (IAM)
- Security Operations
- Vulnerability Management
- Third-Party Risk Management (TPRM)
- Cloud Security
- Security Governance
- Cyber Risk Management
- Regulatory Compliance
- Data Protection
- Zero Trust Architecture
- Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
- Advanced knowledge of information security principles, controls, and industry best practices.
- Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities. Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
- Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
- Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
- Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
- Exceptional written, verbal, and presentation skills, including communication with executive leadership.
- At least one Information Security Professional certification such as:
- Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
- Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.
Desired Qualifications- Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
- Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
- At least one Project Management Professional Certification such as:
- Experience leveraging AI tools and technologies.
- Experience utilizing Microsoft Power Platform
- Familiarity with navigating and utilizing ServiceNow
Additional InformationHours:- Monday - Friday, 8:00AM - 4:30PM
Location:- 820 Follin Lane, Vienna, VA 22180
About Us Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.
Our approach to careers is simple yet powerful: Make our mission your passion.
FORTUNE 100 Best Companies to Work For 2026
Yello and WayUp Top 100 Internship Programs 2025
Computerworld Best Places to Work in IT 2026
Most Loved Workplace - America's Top Most Loved Workplaces 2025
2025 PEOPLE Companies That Care
Newsweek Most Trustworthy Companies in America 2026
Military Times 2025 Best for Vets Employers
Forbes 2026 America's Best Large Employers
Forbes 2025 America's Best Employers for New Grads
Forbes 2025 America's Best Employers for Tech Workers
2025 RippleMatch Campus Forward Award Winner for Overall Excellence
Military.com Top Military Spouse Employers 2025
2026 Handshake Early Talent Award
Newsweek America's Greatest Workplaces for Culture, Belonging and Community 2026
From Fortune Magazine. 2026 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune 100 Best Companies to Work For are registered trademarks of Fortune Media IP Limited and are used under license. Fortune Magazine, Fortune Media (USA) Corporation, and its affiliates are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.
Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at or by calling 1-. This team cannot provide any information on job postings or application status.
Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.
Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.
Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.
