Cybersecurity Risk Manager - (In-Person / No Relocation)

Navigant Credit Union; Smithfield (RI); On-site; USD 120,000 - 180,000; Full time

Job summary

Navigant Credit Union seeks a Cybersecurity Risk Manager to lead the technical risk program, advancing proactive, intelligence-driven risk management. You will assess infrastructure, applications, and data environments, and drive AI governance, third-party risk, and incident readiness with the VP, Information Security Officer.

The role emphasizes collaboration with Legal, Compliance, and Data Governance on AI regulatory considerations, privacy, and ethical usage, while maturing Archer IRM-based

Qualifications

• 5+ years of experience in risk management, preferably in a credit union or financial institution.
• CISSP, CISA, or equivalent certification preferred.
• Experience with enterprise risk management technology required.
• Excellent organizational, analytical, and problem-solving skills.
• Ability to handle multiple projects with effective outcomes.
• Excellent verbal, written, and interpersonal communication skills.
• Understanding of regulatory requirements including GLBA, NIST and FFIEC Guidance.
• Ability to deal with highly confidential information.

Responsibilities

• Conducts technical risk assessments across infrastructure, applications, and data environments.
• Evaluates AI, automation, and advanced threat actor risks.
• Translates technical findings into actionable risk insights for leadership.
• Assists in the development and leads the operationalization of the AI Governance Program.
• Leads risk-based due diligence of third parties including data flow, hosting, and integration risks.
• Monitors evolving AI threats with direct impacts to the Credit Union.
• Establishes a risk-tiered information security review model for Analyst- vs Manager-level reviews.
• Partners with IT to validate integrations and configurations.
• Drives threat intelligence monitoring and risk registers for continuous improvement.
• Owns incident response readiness and tabletop exercises including AI incidents.

Skills

Risk management

CISSP/CISA

Enterprise risk mgmt tech

Analytical thinking

Communication skills

Multi-project mgmt

Regulatory knowledge

Confidential data handling

Education

Bachelor's degree in cybersecurity / information assurance / risk

Tools

Archer IRM

Job description

ABOUT THE ROLE:

The Cybersecurity Risk Manager serves as the technical risk leader within the Information Security Program, responsible for advancing the Credit Union's ability to identify, assess, and manage cybersecurity, artificial intelligence, and third‑party risks. This position directly supports the VP, Information Security Officer in shifting the Program to proactive, intelligence‑driven risk management.

WHAT YOU WILL DO:

1. Conducts technical risk assessments across infrastructure, applications, and data environments.
2. Evaluates emerging risks including artificial intelligence (AI), automation, and advanced threat actor capabilities.
3. Translates technical findings into actionable risk insights for leadership.
4. Assists in the development and leads the operationalization of the AI Governance Program.
5. Assess internal AI use and Third-party AI utilization and controls.
6. Partners with Legal, Compliance, and Data Governance on AI regulatory considerations, privacy implications and ethical usage.
7. Monitors evolving external AI threats that have direct impacts to the Credit Union, its employees, and members.
8. Leads risk based technical due diligence of third parties including architecture and security control validation; data flow, hosting, and integration risks; AI usage; and supply chain risks.
9. Establishes a risk‑tiered information security review model for Analyst‑level vs. Manager‑level technical reviews.
10. Implements ongoing monitoring of threat intelligence on critical vendors and breach/event alert correlation.
11. Partners with IT to validate integrations and configurations
12. Leads continuous monitoring of industry trends and AI‑driven attack techniques to proactively provide VP, ISO insights, develop/ enhance controls, and build risk registers.
13. Owns technical readiness of incident response and tabletop exercises, incorporating third‑party breach scenarios and AI‑related incidents.
14. Collaborates with IT and business areas to conduct post‑incident root cause analysis and control improvements.
15. Ensures risk data such as artificial intelligence, third‑party risk, and cyber events are actionable within the risk management solution, Archer IRM.
16. Drives Program evolution from data collection to risk intelligence.
17. Trains and elevates Information Security Analysts technical and analytical development.
18. Establishes clear role segmentation of operational tasks and analytical ownership.
19. Acts as escalation point for complex risk decisions.
20. Performs all other duties as assigned by the VP, Information Security Officer.

QUALIFICATIONS:

Education

Bachelor's degree required, with a concentration in/focus on cybersecurity, information assurance or risk. An equivalent amount of related job experience may be considered in lieu of a degree.

Experience/Skills/Knowledge:

1. 5+ years of experience in risk management required, preferably in a credit union or financial institution.
2. Certification in Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), or equivalent certification preferred.
3. Experience with enterprise risk management technology required.
4. Excellent organizational, analytical, and problem‑solving skills required.
5. Must have the ability to handle multiple projects/ priorities simultaneously with an effective outcome.
6. Must have excellent verbal, written, and interpersonal communication skills, including ability to communicate risks and concepts to business lines outside the Risk Department.
7. Must be a self‑motivator and have a strong accountability mindset.
8. Understanding of regulatory requirements including GLBA, NIST and FFIEC Guidance required .
9. Must have the ability to deal with highly confidential information. Must have strong service orientation in alignment with the Credit Union's mission and core values.
10. PC proficient, including Microsoft Office (Word, Excel, PowerPoint, Outlook) and the Internet.

ABOUT US:

Navigant Credit Union puts people first. Since 1915, we've helped Rhode Islanders build stronger financial futures-and today with $4 billion in assets, we're the state's largest credit union and one of New England's most trusted.

Our award‑winning culture-recognized as Rhode Island's Best Place to Work-is rooted in our Core Values: Leadership, Unity, Caring, Integrity. They guide how we serve members and how we support each other.

We invest in our team with standout growth opportunities and a best‑in‑class benefits package, including comprehensive health coverage, a generous 401(k) match, tuition reimbursement, competitive pay, and paid volunteer days.

If you're looking for meaningful work and a mission‑driven team, explore our open roles and grow with us.