Director, Operational Risk (Business Resiliency Management)

Job-ID: 33369Category: Enterprise RiskLocation: Vienna, VA, United States; Winchester, VA, United States; Pensacola, FL, United StatesWorkplace: HybridSchedule: Full time, Regular HoursPosted: 2026-10-29Closes: 2026-11-13Targeted Salary Range: Negotiable based on experience and qualificationsNavy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.Leads and oversees the Business Resiliency Management (BRM) risk function, providing direction and leadership in identifying, analyzing, and mitigating BRM risks. Develops and implements risk policies, frameworks, and governance structures to enhance risk resilience. Leads cross-functional risk initiatives and collaborates with senior executives to drive a culture of risk awareness. Serves as a key advisor on risk-related matters and ensures compliance with regulatory standards. Manages multiple teams and influences risk strategy across business units, driving operational excellence and enterprise risk management maturity. More specifically, this Director will lead the day-to-day execution and continued maturity of the enterprise Business Resiliency Management Program, with balanced accountability for business continuity and operational resilience, business resiliency management third-party risk assessments, disaster recovery oversight, and cyber resilience. The Director will integrate these capabilities into a cohesive operating model while maintaining appropriate Second Line of Defense (2LOD) oversight, credible challenge, governance, and escalation. QualificationsBachelor's degree in Business Administration, Risk Management, Emergency Management, Technology, Cybersecurity, Engineering, Auditing, or a related field, or an equivalent combination of education and experience. 10+ years of progressive experience across business continuity, operational resilience, third-party risk, disaster recovery, cyber resilience, technology risk, operational risk, or related financial services risk disciplines. Demonstrated experience designing, implementing, or materially enhancing an enterprise business continuity or operational resilience framework, including BIAs, continuity planning, exercises, remediation, governance, and executive reporting. Demonstrated experience conducting or overseeing resiliency assessments of critical third parties, including continuity and disaster recovery capabilities, dependency and concentration risk, testing evidence, and issue remediation. Demonstrated experience connecting business recovery requirements to technology disaster recovery capabilities, recovery objectives, dependencies, testing, and evidence. Practical experience supporting cyber resilience, cyber incident response, crisis management, or cyber disruption exercises and integrating results into sustainable risk remediation. Strong knowledge of regulatory expectations, industry standards, and risk management practices relevant to business continuity, operational resilience, third-party risk, disaster recovery, and cyber resilience. Extensive experience with risk governance, analytics, metrics, executive reporting, regulatory engagements, and effective challenge in a First or Second Line of Defense environment. Exceptional communication, negotiation, and stakeholder management skills, with the ability to translate complex resilience and technology risk concepts into practical expectations for executives and business partners. Financial services, enterprise risk management, operational risk, or consulting experience preferred; master's degree or relevant professional certification is a plus. Desired Qualifications:5+ years of leadership experience directing teams, enterprise programs, or complex cross-functional initiatives.Additional InformationHours:Monday - Friday, 8:00AM - 4:30PMLocation:820 Follin Lane, Vienna, VA 221805510 Heritage Oaks Drive, Pensacola, FL 32526141 Security Drive, Winchester, VA 22602ResponsibilitiesLead the execution and continued maturity of the enterprise business continuity and operational resilience framework, including business impact analyses (BIAs), continuity strategies, business continuity plans, recovery requirements, exercises, lessons learned, and continuous improvement. Oversee the identification and assessment of critical business services, capabilities, and processes, including their people, facilities, technology, data, third-party, and upstream and downstream dependencies, to identify vulnerabilities, concentration risks, and potential points of failure. Provide oversight and effective challenge of business continuity and technology recovery capabilities, ensuring recovery requirements align with disaster recovery strategies, recovery objectives, application and infrastructure dependencies, recovery sequencing, testing, and demonstrated recoverability. Lead the BRM third-party risk assessment program, evaluating the resiliency of critical third parties and supporting services, including continuity and disaster recovery capabilities, dependency and concentration risks, recovery commitments, testing evidence, and contingency or exit considerations. Partner with Third-Party Risk Management, Procurement, business owners, Technology, and Information Security to integrate resiliency requirements into third-party due diligence, ongoing monitoring, issue management, and material change or renewal decisions. Lead the development and execution of the enterprise cyber resilience framework, connecting business continuity, disaster recovery, technology resilience, cyber incident response, crisis management, and third-party resilience to strengthen preparedness and recovery from severe cyber disruptions. Oversee the identification, escalation, and remediation of material business continuity, third-party resilience, disaster recovery, and cyber resilience risks and capability gaps, including clear ownership, action plans, milestones, evidence, and sustainable closure. Develop and enhance BRM governance, policies, standards, metrics, and executive reporting, providing leadership with balanced visibility into program preparedness, critical dependencies, third-party resilience, recovery capabilities, exercise outcomes, emerging risks, and remediation progress. Lead and develop the BRM team, establish priorities and performance expectations, and build trusted partnerships across business units while preserving the independence and objectivity required of a 2LOD risk function. About the companyNavy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.Our approach to careers is simple yet powerful: Make our mission your passion.FORTUNE100 Best Companies to Work For 2025Yello and WayUp Top 100 Internship ProgramsComputerworld Best Places to Work in ITNewsweek Most Loved Workplaces2025 PEOPLE Companies That CareNewsweek Most Trustworthy Companies in AmericaMilitary Times 2025 Best for Vets EmployersBest Companies for Latinos to Work for 2025Forbes 2025 America’s Best Large EmployersForbes 2025 America's Best Employers for New GradsForbes 2025 America's Best Employers for Tech Workers2025 RippleMatch Campus Forward Award Winner for Overall Excellence Military.com Top Military Spouse Employers 2025 2025 Handshake Early Talent AwardFrom Fortune. 2025 Fortune Media IP Limited. All rights reserved. Used under license. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of, Navy Federal Credit Union.Equal Employment Opportunity: All qualified applicants will receive consideration for employment without regard to age, race, sex, color, religion, national origin, disability, veteran status, pregnancy, sexual orientation, genetic information, gender identity or any other basis protected by applicable law.Accommodations: If you need accommodation or assistance for a qualifying condition to complete the online application (or during any stage of the hiring process), you can contact Navy Federal's Medical Accommodations team at View email address on click.appcast.io or by calling View phone number on click.appcast.io. This team cannot provide any information on job postings or application status.Disclaimers: Navy Federal reserves the right to fill this role at a higher/lower grade level based on business need. An assessment may be required to compete for this position. Job postings are subject to close early or extend out longer than the anticipated closing date at the hiring team’s discretion based on qualified applicant volume. Navy Federal Credit Union assesses market data to establish salary ranges that enable us to remain competitive. You are paid within the salary range, based on your experience, location and market position. For additional details regarding compensation and benefits, review the Benefits page of the Navy Federal Career Site.Protect Yourself from Job Scams: Navy Federal Credit Union jobs are posted on our career site, jobs.navyfederal.org and reputable job boards (e.g., LinkedIn, Indeed). We do not post jobs on social media marketplaces, messaging apps or unverified websites. We will never ask candidates for payment, bank details or personal financial information during the hiring process.Bank Secrecy Act: Remains cognizant of and adheres to Navy Federal policies and procedures, and regulations pertaining to the Bank Secrecy Act.