Overview

　　The ISD Tech and Compliance Analyst will carry out ISD security assessment activities including IT risk assessments and security reviews, as well as evaluations of third-party technology solutions, to ensure alignment with policies, standards, and external compliance regulations wherever applicable. Assessment activities may include a wide variety of tasks depending on the scope of the review and the ISD capabilities within departments (e.g. developing asset inventory, assessing endpoint and application security controls and configurations, examining procedures, etc.) The analyst will be expected to make contributions to the creation and maintenance of documentation/procedures in support of the ISD Risk and Compliance program, and should identify opportunities for leveraging automation to support data consistency and process efficiencies within the program and as it relates to other ISD services. The position is vital to the ongoing management of the audit processes and risk mitigation efforts designed to ensure accurate reporting and communication of business unit risk and compliance posture. The ISD Tech and Compliance Analyst Key function is the input of issues into ServiceNow. Dashboard creation and maintenance for ISD Issue Portfolio Management.

　　This position is eligible for the TalentQuest employee referral program. If an employee referred you for this job, please apply using the system-generated link that was sent to you.

　　Responsibilities

　　Risk Management:

　　Provide input and guidance to teams on risk mitigation Lead the effort in maintaining an accurate and comprehensive risk registerOrganize and execute annual risk control self-assessments Establish and maintain open communication channels with stakeholders Assist in the identification of potential risks and treatment Become proficient in the operations of the ServiceNow Provide input and guidance to teams on risk mitigation Lead the effort in maintaining an accurate and comprehensive risk registerKey function input of issues into ServiceNow

　　Compliance Management:

　　Create, update, and maintain Tech's policies, procedures, and standards Help develop and validate control metrics Lead internal audit processes for control validation Assist with achieving and maintaining compliance/business requirementsCreate, update, and maintain Tech's policies, procedures, and standards Help develop and validate control metrics Lead internal audit processes for control validation Assist with achieving and maintaining compliance with industry/business requirementsKey function input of issues into ServiceNowAnalyze information, requirements, data, work quality, work methods, processes, service specific practices, standards and metrics/statisticsInterpret results of analysis; present recommendations, including alternatives and implicationsCollaborate with other business units to analyze and improve processing procedures and resolve problemsAnalyze changes in policies, procedures and products; determine the impact on the group functionsIdentify and analyze opportunities for new and/or improved processes, data, or technology; provide clear picture of possible outcomesWork with peers, business units and/or project teams, and vendors to ensure business needs are fully communicated, documented and satisfiedMonitor and analyze key performance indicators, and establish processes and methodologies for preventativeCompile, review and prepare data to be used by analysts and management in the analysis of operations, services and productsConduct benchmarking, trend analysis and other input to drive continuous improvement and elevate service performanceAnalyze information to produce analytically-driven inferences and hypotheses to generate actionable recommendationsSolve business problems by defining the problem, interviewing stakeholders, identifying and evaluating alternatives, and presenting findingsProvide input into best practices for the respective areEnsure compliance with Navy Federal Credit Union ISD standards and best practicesPerforms other related duties as assigned

　　Qualifications

　　Significant experience in IT solution creation and delivery with increased business intelligenceExperience working in cross-functional, multi-dimensional teams and projectsExposure to leading, guiding & mentoring othersAbility to work independently and in a team environmentExperience in translating business requirements into technical solutionAdvanced skill maintaining accuracy with attention to detail and meeting deadlinesAdvanced research, analytical, and problem solving skillsAdvanced organizational, planning and time management skillsEffective skill communicating with all levels within an organizationEffective relationship building, negotiation and facilitation skillsEffective skill exercising initiative and using good judgment to make sound decisionsAdvanced skill presenting findings, conclusions, alternatives and information clearly and conciselyAdvanced verbal and written communication skillsAdvanced skill making effective presentations to groups of various sizesAdvanced skill analyzing and organizing problems or work processes for technical solutionsBachelor's Degree in Business, Computer Science or other related field, or the equivalent combination of education, training or experience

　　Required Qualifications

　　Hands on experience with GRC tools such as ServiceNow, OneTrust, Lockpath, or similar tools 5+ years or moreHands on experience performing security assessment of SaaS services 5+ years or more

　　Desired Qualifications

　　Professional certification such as CISA, CISM, CRISC, or CISSP Knowledge of Navy Federal's services, products and functionsExperience working in an IT environmentKnowledge of Navy Federal business processes and applications

　　Salary: Level III - $78,800 - $151,075 annually | Level IV - $97,500 - $173,675 annually

　　Hours: Monday - Friday, 8:00AM - 4:30PM

　　Location: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr. Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602

　　About Us

　　You have goals, dreams, hobbies, and things you're passionate about-what's important to you is important to us. We're looking for people who not only want to do meaningful, challenging work, keep their skills sharp and move ahead, but who also take time for the things that matter to them-friends, family, and passions. And we're looking for team members who are passionate about our mission-making a difference in military members' and their families' lives. Together, we can make it happen. Don't take our word for it:

　　• Military Times 2022 Best for Vets Employers

　　• WayUp Top 100 Internship Programs

　　• Forbes® 2022 The Best Employers for New Grads

　　• Fortune Best Workplaces for Women

　　• Fortune 100 Best Companies to Work For®

　　• Computerworld® Best Places to Work in IT

　　• Ripplematch Campus Forward Award - Excellence in Early Career Hiring

　　• Fortune Best Place to Work for Financial and Insurance Services

　　Equal Employment Opportunity: Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans. EOE/AA/M/F/Veteran/Disability EOE/AA/M/F/Veteran/Disability

　　Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position

　　Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.