> Markdown version of [/jobs/ext/4674854-principal-technical-risk-analyst](https://www.wearedevelopers.com/jobs/ext/4674854-principal-technical-risk-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Technical Risk Analyst

- **Company:** U.S. Navy
- **Location:** Vienna, VA, United States
- **Contract:** Internship / Graduate position
- **Skills:** Cloud Computing, Configuration Management, Cyber Security, Information Systems, Disk Controller, Identity and Access Management, IT Management, Information Systems Security Architecture Professional, Network Architecture, Enterprise Software Applications, Control Language, Information Technology
- **Published:** November 11, 2026
- **Apply:** https://www.dice.com/job-detail/39666e2f-5d56-4c4c-bc26-48f00311df7c

## About the Role

* Extensive experience in technical risk management, control testing, cybersecurity, or IT governance, operating independently as a recognized expert.
 * Demonstrated ability to lead moderate to large, cross departmental projects and initiatives with significant organizational impact.
 * Advanced, hands-on experience designing, documenting, and testing controls (including TOD/TOE), sampling/population management, and evidence alignment in accordance with established methodologies.
 * Expert knowledge of risk management principles and frameworks (e.g., ISO, NIST, COSO) and regulatory compliance requirements for financial institutions.
 * Advanced understanding of IT systems, network architecture, cloud technologies, IAM, endpoint, configuration management, and cybersecurity, etc.
 * Proven experience aligning control documentation to Information Security and enterprise technology (ETP) standards, and to internal/external audit expectations.
 * Demonstrated ability to develop and enhance practices, procedures, templates, and training that are adopted across teams.
 * Excellent analytical, problem solving, and decision-making skills, with the ability to navigate ambiguity and challenge assumptions.
 * Strong interpersonal and communication skills, with the ability to translate complex technical risk concepts for senior management and non-technical stakeholders.
 * Recognized ability to mentor and develop staff at all levels and to build strong cross-functional relationships with business and senior partners.
 * Bachelor's degree in information technology, Computer Science, Risk Management, or a related field, or an equivalent combination of training, education, and experience., * Master's Degree in related field or equivalent combination of training, education and experience
 * Certified Information Systems Security Professional (CISSP)
 * Certified Risk and Information Systems Control (CRISC)
 * Project Management Professional (PMP)
 * Certified Information Systems Auditor (CISA)

## Description

* Interpret and develop solutions to complex, cross functional technical risk and control challenges, delivering significant and measurable impact across the enterprise.
 * Independently lead moderate to large risk and control assessments and initiatives, managing multiple, simultaneous, high impact engagements from planning through delivery.
 * Elevate control testing to audit level granularity, ensuring program maturity, audit readiness, and end to end control identification beyond standard methodology.
 * Influence and drive control design decisions, providing embedded senior oversight and challenging assumptions to structure audit defensible controls.
 * Develop, enhance, and standardize practices, procedures, templates, and instructions (e.g., walkthrough note standards, precision and methodology guidance) that are adopted across teams and referenced by other groups.
 * Drive consistency, standardization, and rationalization of controls across assessments, aligning documentation to Information Security, ETP, and applicable regulatory standards.
 * Translate complex technical processes and system behavior into clear, audit aligned control language for both technical and business stakeholders.
 * Serve as the recognized technical SME on Enterprise Technology Services processes in complex environments.
 * Lead engagements by providing risk assessments, control walkthroughs, compliance documentation, and defensible testing results.
 * Partner with second line risk, Internal Audit, ICFR, Compliance, and Security to ensure holistic risk management and reliable, reusable control results.
 * Mentor and develop analysts at all levels, building a pipeline of talent, transferring knowledge, and raising the overall capability of the risk function.
 * Facilitate workshops, walkthroughs, and training sessions that enhance risk awareness and promote best practices across the program.
 * Continuously evaluate and enhance risk and control frameworks, tools, and methodology to keep pace with an evolving technology and threat landscape.
 * Anticipate and proactively address issues, communicate courageously, and adapt to feedback to ensure deliverables exceed expectations for all stakeholders.
 * Promote a culture of proactive, audit aligned risk management throughout the organization and role model the Leadership Model in all interactions.