Overview

The Assistant Manager, Enterprise Technology Services (ETS) Controls, will play a pivotal role in supporting the ETS department by overseeing the Application Risk Assessment (ARA) and related initiatives. Working closely with application owners, this role will focus on developing and maintaining comprehensive risk and control matrices to effectively identify, assess, monitor, update, and report on the ETS risk landscape. This includes evaluating IT General Controls (ITGCs) across critical ETS processes such as Access Management, Change Management, and Disaster Recovery.

Key responsibilities will involve leading discussions, identifying controls, documenting and testing controls, and collaborating across various lines of defense to establish ownership. The position requires building strong partnerships with risk stakeholders and application owners within ETS and across the organization.

The Assistant Manager will lead strategic initiatives, leveraging their expertise to develop and implement robust compliance frameworks. They will serve as a subject matter expert, providing guidance on risk management strategies and ensuring alignment with organizational goals. The role demands both independent initiative and strong teamwork skills to drive effective outcomes.

Overall, the Assistant Manager, ETS Controls, will contribute significantly to enhancing the organization's risk management framework and fostering a culture of proactive risk mitigation.

Responsibilities

• Manage the development of the Application Risk Assessment process and methodology, including the evaluation and documentation of controls.
• Assist in the identification and development technology solutions and improvements for application control assessments, especially for ServiceNow GRC.
• Manage communication of requirements for the developed Application Risk Assessment, including operating model development and execution for ETS and considering all internal and external stakeholders.
• Lead a team to conduct control design and performance assessments for application IT General Controls (ITGCs).
• Assist in Managing risk assessment initiatives in alignment with enterprise goals and regulatory expectations.
• Collaborate with process owners and other business units to facilitate risk conversations, identify potential business risks, operational and regulatory process deficiencies, and improvement opportunities.
• Manage the identification and documentation of control deficiencies, and conduct quality control reviews.
• Manage a team to identify critical risk and/or control areas to monitor and escalate findings to appropriate stakeholders.
• Assist in managing the development of opportunities for new and/or improved processes, best practices, data, or technology; provide clear picture of outcomes, especially in relation to IT application control compliance and the impact on business processes.
• Assist in managing the alignment of application risk assessments with organizational strategic goals and compliance requirements.
• Manage communication of requirements for the developed Application Risk Assessment, including operating model development and execution for ETS and considering all internal and external stakeholders.
• Identify training opportunities and mentor lower level staff.
• Assess exposure to risk, develop ways to measure risk, and review related policies and procedures to minimize risk.
• Analyze changes in policies, procedures, and products; determine the impact on the group functions.
• Conduct benchmarking, trend analysis, and other input to drive continuous improvement and elevate service performance.
• Solve business problems by defining the problem, interviewing stakeholders, identifying, and evaluating alternatives, and presenting findings.
• Ensure compliance with Navy Federal Credit Union ETS standards and best practices.
• Performs other related duties as assigned.
• Manage a team for the effective identification, mitigation, and management of risks arising from business activities.
• Manage preparation and presentation of recommendations to management and process owners, including assessment summaries; reports; trends; and other outcomes.
• Provide guidance to teams and leadership on the status of standards compliance, risk identification and control issues.

Qualifications

• Bachelor's degree in business, Information Systems, Computer Science, or other related field, or the equivalent combination of education, training, or experience.
• Extensive experience managing the execution control assessments.
• Deep understanding of technology control compliance requirements, including Internal Controls over Financial Reporting; and SOC 1 & 2 reviews; and integrated audit procedures.
• Advanced understanding implementing technology solutions for managing risk and controls evaluation and reporting, especially related to governance risk and compliance platforms.
• Advanced knowledge and understanding of risk-based methodologies and frameworks for financial institutions.
• Expert understanding regarding the risk and impact interactions between technology and business processes, particularly in relation to business applications and their related processes.
• Proven ability to manage the planning, organization, and effective execution of risk mitigation and process improvement initiatives.
• Ability to manage independently and collaborate well in a team environment.
• Expert skill presenting findings, conclusions, alternatives, and information clearly and concisely to all levels of management.
• Proven experience managing relationships within cross-functional, multi-dimensional teams and projects of complexity which have significant business risk and impact.
• Expert experience leading a team in documenting and testing controls in accordance to established requirements and methodologies.
• Considerable experience in collaborating across organizational boundaries and building partnerships across various functions.
• Advanced skill building effective relationships through trust and diplomacy, with the ability to influence, negotiate, and build consensus to reach agreeable and positive outcomes with business partners.
• Experience in managing multiple priorities independently and/or in a team environment to achieve goals.
• Expert demonstrating thought-leadership, initiative-taking, decision-making and creativity solving business problems.

Desired Qualifications:

• Professional certifications including, but not limited to any of the following: CRISC, CISA, CIA, CPA, CISM, CISSP.
• Advanced knowledge of financial institution business processes, applications, services, products, standards, and procedures.
• Experience working in an IT environment and with tools such as ServiceNow.
• Advanced knowledge of state and Federal laws, industry regulations, principle, and practices, and company policies that govern the product and services.

Hours: Monday - Friday, 8:00AM - 4:30PM

Locations: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr. Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602 | Remote

About Us
You have goals, dreams, hobbies, and things you're passionate about-what's important to you is important to us. We're looking for people who not only want to do meaningful, challenging work, keep their skills sharp and move ahead, but who also take time for the things that matter to them-friends, family, and passions. And we're looking for team members who are passionate about our mission-making a difference in military members' and their families' lives. Together, we can make it happen. Don't take our word for it:

Military Times 2022 Best for Vets Employers

WayUp Top 100 Internship Programs

Forbes 2022 The Best Employers for New Grads

Fortune Best Workplaces for Women

Fortune 100 Best Companies to Work For

Computerworld Best Places to Work in IT

Ripplematch Campus Forward Award - Excellence in Early Career Hiring

Fortune Best Place to Work for Financial and Insurance Services

Equal Employment Opportunity: Navy Federal values, celebrates, and enacts diversity in the workplace. Navy Federal takes affirmative action to employ and advance in employment qualified individuals with disabilities, disabled veterans, Armed Forces service medal veterans, recently separated veterans, and other protected veterans. EOE/AA/M/F/Veteran/Disability EOE/AA/M/F/Veteran/Disability

Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team's discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position

Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.