| Location | Vienna, VA |
We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.
The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.
Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.
Our approach to careers is simple yet powerful: Make our mission your passion.
From Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.
Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.
Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal''s Medical Accommodations team at medicalaccommodations@navyfederal.org or by calling 1-888-503-6013. This team cannot provide any information on job postings or application status.
Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.
Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.
Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.
Bachelor''s degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas:
Identity and Access Management (IAM)
Security Operations
Vulnerability Management
Third-Party Risk Management (TPRM)
Cloud Security
Security Governance
Cyber Risk Management
Regulatory Compliance
Data Protection
Zero Trust Architecture
Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
Advanced knowledge of information security principles, controls, and industry best practices.
Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities. Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
Exceptional written, verbal, and presentation skills, including communication with executive leadership.
At least one Information Security Professional certification such as:
CISSP
CISM
CRISC
CISA
Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.
Desired Qualifications
Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
At least one Project Management Professional Certification such as:
PMP
PMI-ACP
CSM
SAFe
Experience leveraging AI tools and technologies.
Experience utilizing Microsoft Power Platform
Familiarity with navigating and utilizing ServiceNow
Additional Information
Hours:
Location: