Senior Risk Analyst (Data Risk)

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.This senior individual-contributor role sits in the First Line of Defense and translates enterprise risk, data governance, technology, information security, privacy, and records management requirements into practical execution for HR. Workstream leadership, executive reporting, and decision support make up the largest share of the work, alongside risk assessment and governance analysis. You will own assigned work independently and produce management-ready deliverables with limited rework.Deep expertise across every risk discipline is not expected.Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.Our approach to careers is simple yet powerful: Make our mission your passion.FORTUNE100 Best Companies to Work For 2025Yello and WayUp Top 100 Internship ProgramsComputerworld Best Places to Work in ITNewsweek Most Loved Workplaces2025 PEOPLE Companies That CareNewsweek Most Trustworthy Companies in AmericaMilitary Times 2025 Best for Vets EmployersBest Companies for Latinos to Work for 2025Forbes 2025 America’s Best Large EmployersForbes 2025 America's Best Employers for New GradsForbes 2025 America's Best Employers for Tech Workers2025 RippleMatch Campus Forward Award Winner for Overall Excellence Military.com Top Military Spouse Employers 2025 2025 Handshake Early Talent AwardFrom Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at View email address on us.fitly.work or by calling View phone number on us.fitly.work. This team cannot provide any information on job postings or application status.Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.Five or more years of progressively responsible experience in risk management, operational or technology risk, information security risk, data governance, compliance, audit, controls, risk transformation, or a related discipline; or an equivalent combination of education and experience.Demonstrated risk and control judgment — applying risk identification, control objectives, evidence, issues, remediation, exceptions, and escalation in practice, not familiarity with the concepts alone.Demonstrated experience independently leading complex projects, assessments, workstreams, or cross-functional initiatives through to defined outcomes.Proven ability to assess materiality, organize ambiguous or incomplete information, and develop practical, proportionate recommendations.Strong project-management skills across milestones, dependencies, actions, risks, decisions, and competing priorities.Advanced PowerPoint skills for executive-ready presentations, and strong Excel skills with experience building dashboards, scorecards, or management reporting.Strong written and verbal communication, with the ability to translate complex risk, business, or technical information into clear, concise language.Strong facilitation and stakeholder-management skills, including working across organizational boundaries.Sound judgment handling highly sensitive and confidential information.Ability to work independently while recognizing when a matter requires escalation, additional expertise, or a management decision.Desired QualificationsHR risk, employee data, or another domain governed by heightened confidentiality, employment law, and/or privacy constraintsFinancial services or another highly regulated industryFirst Line of Defense risk managementRCSA, issue management, control assessments, or risk transformationData governance, data quality, reporting, or records managementIdentity and access management, or data sharing and transfer riskThird-party or vendor riskCloud, analytics, or AI governancePower BI and/or comparable visualization tools; Azure DevOps, Jira, or comparable work-management tools; SharePoint; Microsoft Copilot or other approved AI productivity toolsAdditional InformationHours:Monday - Friday, 8:00AM - 4:30PMLocation:820 Follin Lane, Vienna, VA 221805510 Heritage Oaks Drive, Pensacola, FL 32526141 Security Drive, Winchester, VA 22602Risk analysis and governanceLead HR data risk assessments, reviews, and governance activities, and analyze what enterprise policies, standards, and controls mean for HR processes, applications, reporting, analytics, vendors, and technology.Assess materiality and recommend proportionate responses grounded in control objectives, business impact, and applicable requirements.Evaluate control objectives, evidence, ownership, dependencies, issues, exceptions, and remediation; identify gaps, inconsistencies, emerging risks, and unresolved questions.Frame complex issues into clear management decisions with options, tradeoffs, and a recommended path forward — not just a list of problems.Escalate material risk decisions, unresolved ownership, exceptions, significant dependencies, and matters requiring formal governance or management acceptance.Work spans access and information security; data governance, quality, and reporting; data sharing, lifecycle, and records management; third-party and vendor risk; and analytics, AI, cloud, and emerging technology.Workstream leadershipIndependently lead the risk analysis and execution coordination for assigned HR Data Risk projects and workstreams.Turn ambiguous assignments into clear outcomes, milestones, actions, dependencies, deliverables, and definitions of completion.Distinguish governance, oversight, and decision responsibilities from execution owned by business, technology, vendor, or enterprise partners — and surface dependencies rather than absorbing work that belongs elsewhere.Coordinate across HR, Technology, Risk, and other enterprise partners; facilitate working sessions, document decisions and actions, and drive follow-up.Identify blockers, changing requirements, ownership gaps, and competing priorities, and escalate appropriately.Right-size scope where practical minimum requirements still maintain appropriate risk coverage.Executive reporting and decision supportBuild polished, visually effective presentations, dashboards, scorecards, and portfolio reporting for management and executive audiences.Synthesize complex, fragmented, or incomplete information into clear analysis, recommendations, and decision materials.Translate detailed workstream information into concise leadership narratives focused on what changed, why it matters, and what decision or action is required — covering risk posture, key risks and dependencies, operational impact, upcoming milestones, and recommendations.Analyze across workstreams to surface trends, recurring issues, emerging risks, and capacity or dependency concerns requiring management attention.Quality and ways of workingReview risk documentation, presentations, dashboards, and trackers for accuracy, completeness, consistency, and unsupported conclusions before materials advance.Build reusable templates, trackers, playbooks, and decision tools, and identify opportunities to automate, standardize, or simplify recurring reporting, tracking, and evidence collection.Full timePosting Date: 2026-09-10