Senior Technical Risk & Compliance Lead

Navy Federal Credit Union; Vienna (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

Navy Federal Credit Union seeks an experienced IT Risk Manager to assess and manage risks across IT and operational environments. You will work with cross-functional teams to develop risk frameworks, policies, and controls, ensuring compliance with ISO 27001, NIST, GDPR and SOX.

Lead audits and incident investigations, embedding risk management into projects and processes. The role requires collaboration with security, compliance, legal, and IT teams, strong analytical skills, and the ability to

Qualifications

• Complete knowledge and understanding of business area/specialization.
• Experience in technical risk management, cybersecurity, or IT governance.
• Hands-on experience with risk assessments, risk frameworks, and mitigation strategies.
• Proven experience in managing and mitigating cybersecurity risks.
• Advanced knowledge of risk management principles, frameworks (ISO, NIST, COSO), and regulatory compliance requirements.
• Advanced understanding of IT systems, network architecture, cloud technologies, and cybersecurity.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong interpersonal and communication skills, with the ability to convey complex risk concepts to non-technical stakeholders.
• Experience in incident management, disaster recovery, and business continuity planning.
• Ability to work in a fast-paced environment with tight deadlines.

Responsibilities

• Identify technical risks across IT infrastructure, applications, systems, and data.
• Perform detailed risk assessments of IT projects, vendors, and systems to identify vulnerabilities and threats.
• Analyze new technologies and business processes to determine risks.
• Stay informed about cybersecurity threats and vulnerabilities affecting the organization.
• Develop and implement risk management frameworks, policies, and procedures.
• Prioritize risks and design mitigation strategies with stakeholders.
• Embed risk management into technology projects, processes, and product development.
• Manage remediation of vulnerabilities and track risk reduction.
• Ensure risk processes align with internal policies and regulatory standards (ISO, NIST, GDPR, SOX).
• Lead audits by providing risk assessments, compliance reports, and documentation.
• Monitor regulatory changes with compliance and legal teams.
• Investigate incidents and perform root cause analyses with corrective actions.
• Develop response strategies with security and IT teams.
• Present post-incident reports and lessons learned to management.
• Produce regular risk status reports for executives.
• Maintain documentation of risk assessments, controls, and mitigations.
• Assist in creating risk dashboards for ongoing monitoring.
• Act as SME on technical risk and guide other teams.
• Facilitate risk-awareness workshops and training.
• Collaborate with IT, cybersecurity, compliance, legal, and audit teams.
• Continuously evaluate and enhance risk frameworks and tools.
• Monitor threat landscape and evolving technologies to update risk strategies.
• Promote a culture of proactive risk management across the organization.

Skills

Technical risk management

Cybersecurity

IT governance

Risk assessments

Regulatory compliance

Cloud technologies

Incident management

Disaster recovery

Communication skills

Risk frameworks

Education

Bachelor’s degree in IT/CS/Risk Management or related field

Master’s degree in related field

Certifications (CISSP, CISM, CRISC, CISA) preferred

Tools

ServiceNow

Power BI

Job description

Navy Federal Credit Union seeks an experienced IT Risk Manager to assess and manage risks across IT and operational environments. You will work with cross-functional teams to develop risk frameworks, policies, and controls, ensuring compliance with ISO 27001, NIST, GDPR and SOX.

Lead audits and incident investigations, embedding risk management into projects and processes. The role requires collaboration with security, compliance, legal, and IT teams, strong analytical skills, and the ability to