Summer Associate Internship

The Asset Risk Assessment (ARA) program discovers, identifies, and reports on NFCU's overall IT Business Application risk posture to improve risk awareness and prioritize strategic risk management efforts. The output of the ARA is a certified and approved application attribute data values and an Inherent Risk Tiering/Rating of high, moderate, or low. The ARA program is a 2nd Line of Defense at Navy Federal Credit Union specializing in oversight, guidance, and challenge to the first line (operational business units) to ensure effective risk management and compliance with policies and regulations.

The Summer Associate will provide professional execution of day-to-day tasks and special projects while working within established program guidelines. The Summer Associate will help drive the ARA socialization results at scale and help ensure collaboration with Enterprise Technology Services (ETS) partners, Enterprise Data Governance (EDG) partners, Business Unit Risk Officers, NFCU asset Business and IT owners/delegates.

Potential projects include: 

• Compiling the generation of not only risk prioritization, reporting and dashboards, but also high value attribute data population
• Conduct assessments for net new Navy Federal applications and analyze quality gates and checkpoints 
• Analyze data, and utilize presentation skills to design and develop Business Unit awareness, reports and dashboards

The Summer Associate Program is a 12-week internship program beginning in May 2026 and ending in August 2026. Students will work on impactful projects and meaningful work during their internship. To qualify, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2026 or after. 

• Currently pursuing a bachelor’s degree in information technology, Computer Science, Risk Management, or a related field or equivalent combination of training, education and experience
• Familiarity in cyber security best practices for control mitigation, Vulnerability Management, Business Continuity, Third Party Risk Management, Data Loss Prevention, Network and Cloud Security, etc.
• Verbal, written, interpersonal skills to communicate clearly and concisely technical and non-technical information to all levels of management and a strong EQ

Hours: Monday – Friday 8:00AM - 4:30PM
Location: Remote | 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602

• Effective management of multiple priorities 
• Translation of ARA processes into easily understood terms 
• Advanced research, analytical, and problem-solving skills 
• Proficient verbal and written communication skills 
• Advanced skill presenting findings, conclusions, alternatives, and information clearly and concisely 
• Advanced skill working with all levels of management, supervisors, stakeholders and vendors 
• Experience creating/editing presentations using software or other types of material/media