Senior Technical Risk Analyst

We are seeking an experienced Sr. Technical Risk Analyst to lead complex cybersecurity, risk, compliance, and remediation initiatives across the enterprise. This role requires a seasoned information security professional with deep technical and risk management expertise, coupled with a proven ability to lead large-scale projects from initiation through successful implementation.

The ideal candidate will serve as a trusted advisor to business and technology leaders, driving security strategy, governance, risk reduction, regulatory remediation, and operational excellence. This position requires strong leadership, executive communication skills, and the ability to influence stakeholders across multiple levels of the organization.

- Bachelor's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Engineering, Business, or equivalent combination of training, education and experience.
- 10+ years of progressive experience in information security, cybersecurity, technology risk, or governance across multiple security and risk domains, with the ability to assess risks and controls spanning technical, operational, and governance environments.
- In Sr. Leadership capacity, 5+ years of experience leading technology, cybersecurity, risk or regulatory projects in at least 4 of the following areas: Identity and Access Management (IAM)
- Security Operations
- Vulnerability Management
- Third-Party Risk Management (TPRM)
- Cloud Security
- Security Governance
- Cyber Risk Management
- Regulatory Compliance
- Data Protection
- Zero Trust Architecture

- Extensive experience partnering with stakeholders across Information Security, Internal Audit, Compliance, Risk Management, Regulatory, and Issue Management functions to achieve organizational objectives and strengthen risk governance.
- Advanced knowledge of information security principles, controls, and industry best practices.
- Experience in a leadership capacity supporting audits, examinations, and regulatory remediation activities. Proven ability to translate findings into actionable remediation strategies, establish effective validation criteria, and evaluate whether corrective actions meaningfully reduce risk.
- Demonstrated ability to independently develop and maintain program-level documentation, procedures, governance artifacts, process documentation, and executive-facing deliverables.
- Strong ability to constructively challenge existing practices, identify process inefficiencies and control weaknesses, and collaborate with stakeholders to design, implement, and sustain improvements.
- Skilled at influencing outcomes, facilitating critical discussions, and driving informed decision-making across cross functional teams and leadership.
- Exceptional written, verbal, and presentation skills, including communication with executive leadership.
- At least one Information Security Professional certification such as: CISSP
- CISM
- CRISC
- CISA

- Demonstrated experience applying NIST, ISO 27001, COBIT, FFIEC, or similar risk and security frameworks.
- Experience using Azure DevOps, SharePoint, and Microsoft 365 collaboration tools.

Desired Qualifications

- Experience within a highly regulated industry such as financial services, healthcare, government, or critical infrastructure.
- Experience with Agile, Waterfall, and Hybrid project delivery methodologies.
- At least one Project Management Professional Certification such as: PMP
- PMI-ACP
- CSM
- SAFe

- Experience leveraging AI tools and technologies.
- Experience utilizing Microsoft Power Platform
- Familiarity with navigating and utilizing ServiceNow

Additional Information

Hours:

- Monday - Friday, 8:00AM - 4:30PM

Location:

- 820 Follin Lane, Vienna, VA 22180