Apply on Employer Site

Navy Federal Credit Union · 6 hours ago

Senior Operational Risk Analyst (Business Continuity Management)

820 Follin Ln SE, Vienna, VA, 22180, US

Full-time

Onsite

Mid, Senior Level

$97K/yr - $142K/yr

3+ years exp

Navy Federal Credit Union is a leading financial institution committed to providing exceptional service and support to its members. They are seeking a Senior Operational Risk Analyst to provide oversight and assurance over the organization’s risk and resiliency practices, focusing on business continuity and technology resiliency.

AssociationFinancial ServicesNon Profit

Comp. & Benefits

Responsibilities

Provide independent oversight and review of the organization’s business continuity plans, IT disaster recovery (DR) plans, technology continuity strategies, and testing activities conducted by 1st Line teams

Oversee and challenge the assessments of critical technology services to evaluate recovery capabilities

Plan the research for and development of specialized risk & resiliency assessment scopes, specific to Operational Risk domain / sub domains (Technology, Security, Third Party, Business Resiliency, People, Process, etc.)

Lead assigned business units through execution of technology resiliency, Issue and Event Management validation and resolution; testing and reporting

Collaborate with management and personnel to optimize the technology resiliency scope development, leveraging knowledge of industry norms for Business Continuity Management

Identify potential technology resiliency risks, operational and regulatory process deficiencies and improvement opportunities

Gather and synthesize data; present conclusions and offer risk mitigation, remediation and process improvement solutions to management

Lead efforts to improve the efficiency and effectiveness of operations and risk mitigation processes

Prepare and present to management and/or affected business unit summaries, operational and regulatory risk assessment reports, trending, and remedial or mitigation solutions

Review appropriate KRIs for Business Continuity Management, considering industry norms, regulatory requirements and prior experience; partner with senior leaders to collaborate with assigned business units on thresholds, reporting, analysis, escalation and issues, as appropriate

Assist in drafting Business Continuity Management governance documents with support from teammates and management, and partner with senior leaders to socialize with stakeholders for vetting, publication and monitoring

Qualification

Operational ResilienceBusiness ContinuityRisk ManagementIT InfrastructureCloud ComputingCybersecurity ConceptsRisk FrameworksRegulatory RequirementsAnalytical SkillsPlanning SkillsResearch SkillsProcess ImprovementGovernance DocumentationStakeholder EngagementOrganizational SkillsCollaboration SkillsTime ManagementPresentation Skills

Required

Bachelor's degree in Information Technology, Risk Management, Business, or equivalent combination of training, education and experience

3–6 years of experience in Operational Resilience or Business Continuity

Strong understanding of IT infrastructure, applications, cloud computing, and cybersecurity concepts, with the ability to evaluate resilience from a risk/oversight perspective

Knowledge of risk and resilience frameworks: ISO 22301, NIST SP 800-34, ISO 27001, COBIT, ITIL

Familiarity with regulatory requirements for financial institutions (FFIEC, OCC, DORA, PRA, FCA, GDPR, HIPAA)

Proven ability to plan, organize, and execute risk mitigation and process improvement initiatives

Advanced organizational, planning, and time management skills

Advanced research and analytical skills

Advanced collaboration skills with the ability to work across functions to address risk concerns

Preferred

Master's Degree in a related field or an equivalent combination of training, education, and experience that provided exposure to or management of ORM-related risk domains

Relevant certifications such as CBCI, CBCP, MBCP, CBCA, or CBCLA

Experience in Financial Services, First, Second (ERM, ORM), and/or Third Line Risk Management, or Consulting experience