Director, Operational Risk (Business Resiliency Management)

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

Leads and oversees the Business Resiliency Management (BRM) risk function, providing direction and leadership in identifying, analyzing, and mitigating BRM risks. Develops and implements risk policies, frameworks, and governance structures to enhance risk resilience. Leads cross-functional risk initiatives and collaborates with senior executives to drive a culture of risk awareness. Serves as a key advisor on risk-related matters and ensures compliance with regulatory standards. Manages multiple teams and influences risk strategy across business units, driving operational excellence and enterprise risk management maturity.

More specifically, this Director will lead the day-to-day execution and continued maturity of the enterprise Business Resiliency Management Program, with balanced accountability for business continuity and operational resilience, business resiliency management third-party risk assessments, disaster recovery oversight, and cyber resilience. The Director will integrate these capabilities into a cohesive operating model while maintaining appropriate Second Line of Defense (2LOD) oversight, credible challenge, governance, and escalation.

- Bachelor's degree in Business Administration, Risk Management, Emergency Management, Technology, Cybersecurity, Engineering, Auditing, or a related field, or an equivalent combination of education and experience.
- 10+ years of progressive experience across business continuity, operational resilience, third-party risk, disaster recovery, cyber resilience, technology risk, operational risk, or related financial services risk disciplines.
- Demonstrated experience designing, implementing, or materially enhancing an enterprise business continuity or operational resilience framework, including BIAs, continuity planning, exercises, remediation, governance, and executive reporting.
- Demonstrated experience conducting or overseeing resiliency assessments of critical third parties, including continuity and disaster recovery capabilities, dependency and concentration risk, testing evidence, and issue remediation.
- Demonstrated experience connecting business recovery requirements to technology disaster recovery capabilities, recovery objectives, dependencies, testing, and evidence.
- Practical experience supporting cyber resilience, cyber incident response, crisis management, or cyber disruption exercises and integrating results into sustainable risk remediation.
- Strong knowledge of regulatory expectations, industry standards, and risk management practices relevant to business continuity, operational resilience, third-party risk, disaster recovery, and cyber resilience.
- Extensive experience with risk governance, analytics, metrics, executive reporting, regulatory engagements, and effective challenge in a First or Second Line of Defense environment.
- Exceptional communication, negotiation, and stakeholder management skills, with the ability to translate complex resilience and technology risk concepts into practical expectations for executives and business partners.
- Financial services, enterprise risk management, operational risk, or consulting experience preferred; master's degree or relevant professional certification is a plus.

Desired Qualifications:

- 5+ years of leadership experience directing teams, enterprise programs, or complex cross-functional initiatives.

Additional Information

Hours:

- Monday - Friday, 8:00AM - 4:30PM

Location:

- 820 Follin Lane, Vienna, VA 22180
- 5510 Heritage Oaks Drive, Pensacola, FL 32526
- 141 Security Drive, Winchester, VA 22602