Principal Operational Risk Analyst (Technology Risk)

Navy Federal • Pensacola, FL

1d • Onsite

About The Position

Responsible for overseeing the identification, assessment, and mitigation of technical risks across the organization's systems, infrastructure, and technology stack. This role involves working closely with cross-functional teams to implement strategies that minimize risks while ensuring compliance with internal policies and external regulations. Responsible for identifying, evaluating, and mitigating technical risks associated with projects, systems, or technologies within an organization. This role combines technical expertise, risk management skills, and leadership to ensure that technical risks are managed effectively, safeguarding the company's operations, data, and reputation. Work independently to interpret and develop solutions to complex business challenges that have a significant impact on the function or branch. Specialized skill set and proficiency with procedures and techniques. Recognized as an expert in own area within the organization. This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you. Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Requirements

• Bachelor’s Degree in Liberal Arts, Business Administration, Auditing, Technology / Engineering, Management, or other related fields, or equivalent combination of education and experience
• 7-10 years of experience in risk management, compliance, or governance functions
• Subject matter expert in operational risk frameworks, scenario analysis, and emerging risk trends
• Significant expertise in risk identification, analysis, and mitigation strategies across multiple business functions
• Develops and enhances risk assessment frameworks and methodologies, including RCSA
• Leads the development of risk reporting, dashboards, and key risk indicators (KRIs)
• Partners with senior leadership to provide strategic guidance on risk trends and mitigation strategies
• Significant knowledge of federal and state regulatory requirements and industry best practices
• Significant experience managing large-scale risk initiatives and process improvement efforts
• Significant expertise in operational and regulatory risk control concepts and practices
• Advance project management skills to drive enterprise-wide risk initiatives
• Strong leadership, problem-solving, and decision-making abilities
• Proven ability to align risk management strategies with business objectives
• Significant experience engaging with senior leadership and regulatory stakeholders on risk-related matters

Nice To Haves

• Master’s degree in Computer Science, Information Technology, Engineering, or a related technical field or equivalent combination of training, education and experience
• Significant experience in Financial Services, First, Second (ERM, ORM), and/or Third Line Risk Management, or Consulting experience
• Significant Cybersecurity & IT Governance experience
• One or more of the following designations, Certified Information Systems Security Professional (CISSP), Certified Risk and Information Systems Control (CRISC), Project Management Professional (PMP) or Certified Information Systems Auditor (CISA)

Responsibilities

• Design and execute risk assessment frameworks across multiple Operational Risk domains, ensuring alignment with regulatory requirements, industry best practices, and internal policies.
• Lead the execution of ORM programs, including RCSA, Business Resiliency assessments, and Issue and Event Management validation, ensuring comprehensive risk identification and mitigation.
• Conduct in-depth analysis to assess enterprise-wide risk exposure, identifying emerging threats, control weaknesses, and areas for process optimization.
• Synthesize and interpret complex risk data, developing actionable insights and recommendations for senior management.
• Oversee risk testing, validation, and remediation activities, ensuring continuous improvement of risk controls and compliance with regulatory requirements.
• Collaborate with business leaders to enhance risk awareness, implement control enhancements, and drive risk-informed decision-making.
• Monitor Key Risk Indicators (KRIs), ensuring proactive risk monitoring and reporting across business units.
• Lead the development and refinement of ORM-related Policies, Instructions, and Standards, ensuring enterprise-wide consistency and compliance.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees