Bachelor's degree in a relevant field or equivalent experience.
10+ years in information security, cybersecurity, or technology risk management.
5+ years in a senior leadership role managing projects in multiple security domains.
Advanced knowledge of security principles and industry best practices.
At least one relevant Information Security certification (CISSP, CISM, etc.).
Responsibilities
Lead large-scale cybersecurity and risk initiatives across the enterprise.
Drive project delivery from planning to execution and stakeholder management.
Collaborate with various teams to identify and mitigate risks.
Develop and implement risk management strategies and governance processes.
Assess emerging threats and translate findings into actionable plans.
Prepare executive-level reports on program status and risks.
Mentor team members and promote a culture of accountability.
Benefits
Monday - Friday work schedule.
Location in Vienna, VA.
Opportunity to influence security strategy and governance.
Access to advanced tools and technologies.
Professional development and mentorship opportunities.
Full Job Description
Job Description
We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.
The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.
Responsibilities
Lead large-scale information security, technology risk, and regulatory project and remediation initiatives across the enterprise.
Drive end-to-end project and program delivery, including planning, execution, governance, reporting, and stakeholder management.
Partner with technology, security, audit, compliance, legal, and business teams to identify and mitigate cybersecurity and operational risks.
Develop and implement risk management strategies, frameworks, and governance processes.
Lead cross-functional teams through complex security initiatives involving multiple business units and technology organizations.
Assess emerging threats, vulnerabilities, and regulatory requirements, and translate findings into actionable remediation plans.
Prepare and present executive-level reporting on program status, risks, mitigation strategies, and performance metrics.
Support regulatory examinations, audits, and risk assessments by providing leadership, documentation, analysis, and remediation oversight.
Establish project governance standards, success metrics, and accountability frameworks.
Influence senior leaders and stakeholders to align priorities, secure resources, and drive successful outcomes.
Promote continuous improvement of information security, risk management, and project delivery practices.
Mentor and develop team members while fostering a culture of accountability, collaboration, and excellence.
Qualifications
Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas:
Identity and Access Management (IAM)
Security Operations
Vulnerability Management
Third-Party Risk Management (TPRM)
Cloud Security
Security Governance
Cyber Risk Management
Regulatory Compliance
Data Protection
Zero Trust Architecture
Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
Advanced knowledge of information security principles, controls, and industry best practices.
Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities. Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
Exceptional written, verbal, and presentation skills, including communication with executive leadership.
At least one Information Security Professional certification such as:
CISSP
CISM
CRISC
CISA
Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.
Desired Qualifications
Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
At least one Project Management Professional Certification such as:
PMP
PMI-ACP
CSM
SAFe
Experience leveraging AI tools and technologies.
Experience utilizing Microsoft Power Platform
Familiarity with navigating and utilizing ServiceNow
Additional Information
Hours:
Monday - Friday, 8:00AM - 4:30PM
Location:
820 Follin Lane, Vienna, VA 22180
About Navy Federal Credit Union
Navy Federal Credit Union is a credit union that serves members of the military and their families. The credit union offers a range of financial products and services, including checking and savings accounts, loans, and credit cards. Navy Federal Credit Union was founded in 1933 and is headquartered in Vienna, Virginia. The credit union has more than 9 million members and operates more than 300 branches across the United States and around the world.
