Job Description

Responsible for assessing and managing technical risks across the organization’s IT and operational environments. Works closely with cross-functional teams to identify and analyze emerging technology risks, implement risk management strategies, and maintain compliance with industry standards and regulations. Plays a key role in developing frameworks for risk identification, reporting, mitigation, and control. Responsible for understanding the technological landscape, implementing risk management frameworks, and ensuring that the organization adheres to industry standards and regulatory requirements. Work under minimal supervision and use complete understanding of business needs and objectives to support projects that have impact on the achievement of operational goals. Advanced skill set and proficiency with procedures and techniques.

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.

• Best Companies for Latinos to Work for 2024
• Computerworld® Best Places to Work in IT
• Forbes® 2024 America’s Best Large Employers
• Forbes® 2023 The Best Employers for New Grads
• Fortune Best Workplaces for Millennials™ 2023   
• Fortune Best Workplaces for Women ™ 2023       
• Fortune 100 Best Companies to Work For® 2024
• Military Times 2023 Best for Vets Employers
• Newsweek Most Loved Workplaces 
• Ripplematch Campus Forward Award - Excellence in Early Career Hiring
• Yello and WayUp Top 100 Internship Programs

From Fortune. ©2024 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.

Equal Employment Opportunity: Navy Federal values and celebrates diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected Veteran.

Hybrid Workplace: Navy Federal Credit Union is a hybrid workplace, and details will be discussed during your interview process.

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position.

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.

• Bachelor’s degree in Information Technology, Computer Science, Accounting, Risk Management, or a related field or equivalent combination of training, education and experience.
• Advanced hands-on experience with evidence and documentation gathering, sample sizing/population management, and results and observations sharing. 
• Working knowledge of IT regulatory guidelines and security/control frameworks for financial institutions.
• Working knowledge of internal and external audit processes. 
• Advanced hands-on experience documenting, testing, and reviewing controls in accordance established requirements and methodologies.
• Advanced hands-on experience conducting control and process walkthroughs with stakeholders.
• Extensive experience driving conversations, synthesizing information, and probing for additional information when needed. 
• Advanced skill presenting control testing information and conclusions to stakeholders.
• Advanced skill preparing/reviewing clear, concise, and adequately referenced work papers to document testing procedures and conclusions.
• Advanced skill maintaining accuracy with attention to detail and meeting deadlines.
• Advanced organizational, planning and time management skills.
• Advanced skill communicating with all levels within an organization.
• Experience working and participating in cross-functional, multi-dimensional teams and projects.
• Effective relationship building, negotiation and facilitation skills.
• Experience in leading, guiding & mentoring others.
• Advanced skill analyzing and organizing problems or work processes for technical solutions.
• Ability to work independently and in a team environment.
• Significant experience in translating business requirements into technical solutions.

Desired Qualifications

• Knowledge of Navy Federal’s services, products, and functions.
• Experience working in an IT risk environment.
• Knowledge of Navy Federal business processes and applications.
• CISA, CIA, or CPA preferred certifications.
• Public Accounting experience.

Hours: Monday - Friday, 8:00AM - 4:30PM

Locations: 820 Follin Lane, Vienna, VA 22180 | 5510 Heritage Oaks Dr. Pensacola, FL 32526

• Collaborate with other internal teams to embed risk management into technology projects, operational processes, and product development to build cohesive approach to risk management.
• Develop and analyze changes in policies, procedures, and products; determine the impact on the group functions.
• Identify and analyze opportunities for new and/or improved processes, data, or technology; provide clear picture of possible outcomes. 
• Monitor and analyze key performance indicators and establish processes and methodologies for preventative measures.
• Conduct benchmarking, trend analysis and other input to drive continuous improvement and elevate service performance.
• Solve business problems by defining the problem, interviewing stakeholders, identifying, and evaluating alternatives, and presenting findings.
• Experience in technical risk management, cybersecurity, or IT governance.
• Hands-on experience with risk assessments, risk frameworks, and mitigation strategies.
• Advanced knowledge of risk management principles, frameworks (e.g., ISO, NIST, COSO), and regulatory compliance requirements.
• Advanced understanding of IT systems, network architecture, cloud technologies, and cybersecurity.
• Strong interpersonal and communication skills, with the ability to convey complex risk concepts to non-technical stakeholders.
• Ability to work in a fast-paced environment with tight deadlines.
• Prioritize risks based on business impact, and work with stakeholders to design and implement mitigation strategies.
• Promote a culture of risk awareness and proactive risk management throughout the organization.
• Facilitate workshops and training sessions to enhance risk awareness and promote best practices.
• Prepare and present regular reports to senior management and stakeholders on the status of technical risks, trends, and mitigation efforts.
• Act as a subject matter expert on technical risk and provide guidance to other teams across the organization.