Overview

Responsible for overseeing the identification, evaluation, and mitigation of technical risks across the Digital's systems, products and infrastructure. Plays a critical part in ensuring that technology-related risks are adequately managed, compliant with regulatory requirements, and aligned with the organization's overall risk management strategy. Manages professionals and/or leaders and is accountable for the performance and results of a team. Decisions are guided by policies, resources and business plan. Develop, manage and guide execution of operational initiatives to achieve tactical objectives. The Manager will work closely with ETS, Security, and other stakeholders to foster a collaborative approach to help reduce risk to Navy Federal and increase our security posture. This role demands the ability to lead by influence, build strong cross functional partnerships, and drive the organization toward a secure, resilient, and compliant technical environment.

• Support Digital Risk Officer with the development and execution of the organization's technical risk governance strategy, ensuring alignment with overall business objectives and security priorities
• Identify and assess technical risks associated with systems, products, applications, networks, and infrastructure
• Act as a trusted advisor to help business teams implement best practices in risk mitigation and remediation
• Conduct regular risk assessments to identify, monitor, and manage risks associated with the use, ownership, operation, involvement, influence, and development / adoption of technology within an enterprise
• Conduct risk assessments and reviews of external partners, ensuring compliance with contractual and regulatory requirements
• Oversee assessment, and prioritization of deficiencies across systems, applications, and infrastructure, and lead the development of effective remediation strategies in collaboration with technical teams
• Work with Digital product teams to analyze emerging technologies and their associated risks
• Collaborate with business and technical teams to ensure that security, compliance, and risk mitigation are seamlessly embedded in transformation strategies
• Work with cybersecurity, ETS and Digital Engineering teams to address vulnerabilities and improve overall security posture
• Develop and implement risk mitigation strategies to reduce the impact of technical risks on the organization
• Design and deploy Digital controls, processes, and procedures to manage identified risks
• Ensure that technical systems adhere to industry best practices and regulatory standards (e.g., ISO, NIST, GDPR)
• Develop and maintain technical risk management policies, procedures, and frameworks
• Ensure compliance with internal policies and external regulations (e.g., data privacy, cybersecurity laws)
• Collaborate with legal, compliance, and internal audit teams to ensure alignment on technical risk issues
• Lead and coordinate the response to technical incidents and breaches, including root cause analysis and remediation efforts
• Collaborate with cross-functional teams including IT, operations, compliance, and business units to communicate risks and provide guidance on mitigation strategies
• Present technical risk reports to senior management and board members, highlighting key risk areas and proposed actions
• Establish processes for continuous monitoring of key technical risks
• Produce regular risk reports, dashboards, and metrics to provide visibility into the organization's technical risk landscape
• Stay up-to-date with the latest industry trends, regulations, and best practices to continuously improve the risk management function
• Evaluate and manage risks associated with third-party vendors and service providers
• Lead and mentor a team of technical risk analysts
• Provide ongoing training and development opportunities to ensure the team is up-to-date on the latest risk management practices and technologies

• College/university degree and 5-7 years work experience; 1 - 3 years of management experience
• Proven experience working with cross functional teams in a fast-paced, technology-driven environment
• Experience in technical risk management, IT security, or related roles
• Broad knowledge of risk management frameworks (e.g., ISO 31000, NIST Cybersecurity Framework)
• Broad knowledge of security technologies (e.g., firewalls, intrusion detection systems, encryption)
• Excellent problem-solving, analytical, and decision-making skills
• Excellent communication skills with the ability to present complex technical information to non-technical stakeholders
• Broad knowledge of Risk management
• Broad knowledge of Cybersecurity risk
• Broad knowledge of interworking's of IT systems and network architecture
• Compliance and regulatory understanding
• Incident and Problem Management experience
• Experience with technical auditing and assessments
• Demonstrated leadership and team management experience
• Ability to guide, influence and persuade others, primarily internally

• Banking/financial industry standards and practices
• Knowledge of NFCU products, services, programs, policies, and procedures
• Certification in appropriate area: PMP, ITIL, SAFe5, etc.
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)