To manage from a 2nd Line of Defense (2ND LOD), a comprehensive risk strategy approach to govern 1st Line of Defense (1st LOD) technical and security related controls and processes; assist the teams with recommendations and Regulatory compliance requirements to minimize risk exposure within NFCU. Prepare risk reduction recommendations based on analysis of the control environment and alignment to policies and procedures. Promote operational efficiency and service excellence through appropriate risk management strategies.

Responsibilities:
2nd LOD Risk Analyst roles and responsibilities, but not limited to the following:

• Analyze 1st LOD risk and control data and processes to ensure alignment against Regulatory practices, NFCU policy and standards; governance of 1st LOD metrics/statistics to measure KPI against risk posture
• Collaborate with 1st LOD to analyze and recommend control and processing improvements to best align to the NFCU control framework
• Oversight and rollout of new policies, procedures; determine the impact on the 1st LOD
• Ensure clear, concise, and effective communication of material to stakeholders and management
• Compile, review, and prepare data to be used by ERM management in the analysis of 1st LOD risk and control operations and processes
• Conduct benchmarking, trend analysis, and other input to drive continuous improvements in the risk reduction, control maturity, and alignment to Regulatory requirements

o Analyze information to produce analytically-driven inferences and hypotheses to generate actionable recommendations
o Provide input into best practices for the respective area
o Ensure alignment with NFCU standards and best practices
o Assess exposure to risk, ways to measure operational risk, establishes policies and procedures to minimize risk, identifies ways to protect the organization from financial loss and reputational damage

• Deliver on a comprehensive process for tracking and managing internal and external exam findings with effective challenges from 2nd LOD
• Collaborate with cross-functional teams to implement effective programs and measures designed to identify and mitigate risks associated with technical and security operations
• Assist with 3rd Line of Defense (3rd LOD) and external auditors (e.g., NCUA, CFPB, and contracted third parties) to prepare and address audits as required
• Prepare 2nd LOD position papers to highlight issues which may or will impact Navy Federal operations
• Develop and coordinate the production of 2nd LOD performance reports to ERM senior management
• Make presentations to management and staff on industry and regulatory related news and developments
• Perform other duties as assigned

Qualifications Required:

• Bachelor’s Degree in Business, Computer Science or other related field, or the equivalent combination of education, training, or experience

o Advanced knowledge and understanding of Cybersecurity framework implementation; 3 Lines of Defense operations; risk-based auditing techniques and methodologies
o Expert knowledge of operational and regulatory risk controls, concepts, and practices
o Expert knowledge of applicable federal and state regulations, company policies, and industry best practices

• Advanced organizational, planning, and time management skills in order to multi task competing priorities in a fast paced and dynamic environment

o Significant experience in engaging cross-functional, multi-dimensional teams
o Advanced skill presenting findings, conclusions, alternatives, and information clearly and concisely

• Desired – Significant experience working in an IT environment designing or assessing IT controls including cloud implementations, SDLC, identity access management, change management, information security, data management
• Expert research, analytical, and problem-solving skills
• Effective relationship building, negotiation, and facilitation skills with various stakeholders
• Experience in leading, guiding, and mentoring others
• Advanced skill exercising initiative and using good judgment to make sound decisions
• Expert verbal and written communication skills
• Ability to work independently and in a team environment
• Desired - Knowledge of Navy Federal’s services, products, and functions
• Desired Certification – CISA, CISSP, CISM, Cloud Certifications

Hours: Monday - Friday, 8:00am - 5:00pm (Partial Telework Options Available)

Location: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602

Salary: $80,800 to $139,400

Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position.

• Navy Federal is now hybrid! Our standard enterprise requirement for a hybrid schedule is to report onsite 4-16 days each month. The number of days reporting onsite will ultimately be determined by the employee's leadership and business unit needs. You will learn more throughout the hiring and onboarding process.