Director, Operational Risk (Business Resiliency Management)

Navy Federal • Pensacola, FL

8d

About The Position

Navy Federal Credit Union is hiring a Director to lead the Business Resiliency Management (BRM) risk function and oversee the day-to-day execution and continued maturity of its enterprise Business Resiliency Management Program. The role has balanced accountability for business continuity and operational resilience, BRM third-party risk assessments, disaster recovery oversight, and cyber resilience. The Director integrates these capabilities into a cohesive operating model while maintaining Second Line of Defense (2LOD) oversight, credible challenge, governance, and escalation.

The Director provides leadership in identifying, analyzing, and mitigating BRM risks; develops risk policies, frameworks, and governance structures; and leads cross-functional initiatives in collaboration with senior executives. The role advises on risk-related matters, supports compliance with regulatory standards, manages multiple teams, and influences risk strategy across business units to advance operational excellence and enterprise risk management maturity.

Applicants must be authorized to work in the United States without current or future sponsorship. The stated work hours are Monday through Friday, 8:00 AM to 4:30 PM. Listed work locations are 820 Follin Lane, Vienna, Virginia; 5510 Heritage Oaks Drive, Pensacola, Florida; and 141 Security Drive, Winchester, Virginia.

Requirements

• Bachelor's degree in Business Administration, Risk Management, Emergency Management, Technology, Cybersecurity, Engineering, Auditing, or a related field, or an equivalent combination of education and experience.
• 10+ years of progressive experience in business continuity, operational resilience, third-party risk, disaster recovery, cyber resilience, technology risk, operational risk, or related financial services risk disciplines.
• Demonstrated experience designing, implementing, or materially enhancing an enterprise business continuity or operational resilience framework, including BIAs, continuity planning, exercises, remediation, governance, and executive reporting.
• Demonstrated experience conducting or overseeing resiliency assessments of critical third parties, including continuity and disaster recovery capabilities, dependency and concentration risk, testing evidence, and issue remediation.
• Demonstrated experience connecting business recovery requirements to technology disaster recovery capabilities, recovery objectives, dependencies, testing, and evidence.
• Practical experience supporting cyber resilience, cyber incident response, crisis management, or cyber disruption exercises and integrating results into sustainable risk remediation.
• Strong knowledge of regulatory expectations, industry standards, and risk management practices relevant to business continuity, operational resilience, third-party risk, disaster recovery, and cyber resilience.
• Extensive experience with risk governance, analytics, metrics, executive reporting, regulatory engagements, and effective challenge in a First or Second Line of Defense environment.
• Exceptional communication, negotiation, and stakeholder management skills, including the ability to translate complex resilience and technology risk concepts into practical expectations for executives and business partners.
• Authorization to work in the United States without the need for current or future sponsorship.

Nice To Haves

• Financial services, enterprise risk management, operational risk, or consulting experience.
• Master's degree or relevant professional certification.
• 5+ years of leadership experience directing teams, enterprise programs, or complex cross-functional initiatives.

Responsibilities

• Lead execution and continued maturity of the enterprise business continuity and operational resilience framework, including business impact analyses, continuity strategies and plans, recovery requirements, exercises, lessons learned, and continuous improvement.
• Oversee identification and assessment of critical business services, capabilities, and processes and their people, facilities, technology, data, third-party, upstream, and downstream dependencies to identify vulnerabilities, concentration risks, and potential points of failure.
• Provide oversight and effective challenge of business continuity and technology recovery capabilities, ensuring recovery requirements align with disaster recovery strategies, recovery objectives, application and infrastructure dependencies, recovery sequencing, testing, and demonstrated recoverability.
• Lead the BRM third-party risk assessment program, evaluating critical third parties and supporting services for continuity and disaster recovery capabilities, dependency and concentration risks, recovery commitments, testing evidence, and contingency or exit considerations.
• Partner with Third-Party Risk Management, Procurement, business owners, Technology, and Information Security to integrate resiliency requirements into third-party due diligence, monitoring, issue management, and material change or renewal decisions.
• Lead development and execution of the enterprise cyber resilience framework, connecting business continuity, disaster recovery, technology resilience, cyber incident response, crisis management, and third-party resilience.
• Oversee identification, escalation, and remediation of material business continuity, third-party resilience, disaster recovery, and cyber resilience risks and capability gaps, ensuring clear ownership, action plans, milestones, evidence, and sustainable closure.
• Develop and enhance BRM governance, policies, standards, metrics, and executive reporting on preparedness, critical dependencies, third-party resilience, recovery capabilities, exercise outcomes, emerging risks, and remediation progress.
• Lead and develop the BRM team, establish priorities and performance expectations, and build trusted partnerships across business units while preserving the independence and objectivity of a 2LOD risk function.

What This Job Offers

• Job Type: Full-time
• Career Level: Director