Principal Technical Risk Analyst

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Serves as the highest-level individual contributor responsible for interpreting and developing solutions to complex, cross departmental technical risk and control challenges with significant organizational impact. Operates independently and is recognized as a subject matter expert (SME) across the organization’s IT and operational environments. Leads moderate to large risk and control initiatives, drives standardization and audit alignment, and influences how controls are designed, structured, and tested across the enterprise. Works with senior management and second and third-line partners to elevate the maturity, quality, and defensibility of the risk and control program, while mentoring analysts at all levels, reviewing documentation and enhancing team practices, procedures, and methodology.

- Extensive experience in technical risk management, control testing, cybersecurity, or IT governance, operating independently as a recognized expert.
- Demonstrated ability to lead moderate to large, cross departmental projects and initiatives with significant organizational impact.
- Advanced, hands-on experience designing, documenting, and testing controls (including TOD/TOE), sampling/population management, and evidence alignment in accordance with established methodologies.
- Expert knowledge of risk management principles and frameworks (e.g., ISO, NIST, COSO) and regulatory compliance requirements for financial institutions.
- Advanced understanding of IT systems, network architecture, cloud technologies, IAM, endpoint, configuration management, and cybersecurity, etc.
- Proven experience aligning control documentation to Information Security and enterprise technology (ETP) standards, and to internal/external audit expectations.
- Demonstrated ability to develop and enhance practices, procedures, templates, and training that are adopted across teams.
- Excellent analytical, problem solving, and decision-making skills, with the ability to navigate ambiguity and challenge assumptions.
- Strong interpersonal and communication skills, with the ability to translate complex technical risk concepts for senior management and non-technical stakeholders.
- Recognized ability to mentor and develop staff at all levels and to build strong cross-functional relationships with business and senior partners.
- Bachelor's degree in information technology, Computer Science, Risk Management, or a related field, or an equivalent combination of training, education, and experience.

Desired Qualifications

- Master’s Degree in related field or equivalent combination of training, education and experience
- Certified Information Systems Security Professional (CISSP)
- Certified Risk and Information Systems Control (CRISC)
- Project Management Professional (PMP)
- Certified Information Systems Auditor (CISA)

Additional Information

Hours:

- Monday - Friday, 8:00AM - 4:30 PM

Location:

- 820 Follin Lane, Vienna, VA 22180