Principal Risk Analyst (Governance Risk Compliance)

Overview

As part of the Risk Technology Enablement and Innovation team, you will support the Governance, Risk and Compliance (GRC) efforts and will partner with risk teams across Navy Federal to assist with GRC adoption and to improve overall GRC program, risk governance, and reporting in accordance with risk management standards across the three lines of defense. Develop, implement, and support GRC Management processes to enhance effectiveness and ensure alignment with key enterprise objectives and corporate strategy.

Responsible for supporting the operation of the risk function by evaluating and analyzing risks of varying complexity and identifying and implementing approaches and solutions to mitigate those risks.

• Lead the design and implementation of GRC platform by gathering requirements from process owners, translating them into detailed user stories and workflows, and defining clear acceptance criteria
• Identify potential business risks, operational process deficiencies and improvement opportunities
• Gather and synthesize data; present conclusions and offer risk mitigation, remediation and process improvement solutions to management
• Possess hands-on experience with the ServiceNow GRC solution, including modules such as IRM and Third-Party Risk, with a strong understanding of platform capabilities and configuration
• Provide guidance and support as a subject matter expert: assist business with developing and maturing their processes and increasing value through effective risk management
• Play a key role in advising business and development teams on multiple solutions and configuration options to enable complex risk management activities leveraging ServiceNow
• Partner with the process owners to identify and document business and functional requirements for the GRC solutions
• Analyze business requirements to develop process flows and user stories, and work with the development team to configure the GRC platform to align with defined business objectives
• Coordinate and support User Acceptance Testing (UAT), including test planning, execution tracking, and issue resolution
• Evaluate and prioritize change requests to determine technology and design requirements in collaboration with the process owners and participate in triage to assess approval levels in alignment with change management processes.
• Expert in managing multiple priorities independently and/or in a team environment to achieve goals
• Assist with the development and enhancement of practices, procedures, and instructions
• Develop and maintain strong working relationships with team members, subject matter experts, and leaders; work with senior management on complex issues
• Strong interpersonal, verbal, and written communication skills
• Mentor lower level staff

• Subject matter expert in Governance, Risk and Compliance (GRC) and Risk Management methodologies
• Subject matter expert within business area/specialization with understanding of interrelationships of different disciplines
• Significant knowledge and understanding of risk-based auditing techniques and methodologies
• Significant knowledge of applicable federal and state regulations, company policies, and industry best practices
• Significant experience managing multi-faceted projects simultaneously that have cross-departmental impact
• Significant knowledge of operational and regulatory risk control concepts and practices
• Proven ability to plan, organize and effectively execute risk mitigation and process improvement initiatives
• Advanced organizational, planning and time management skills
• Advanced research and analytical skills
• Bachelor's Degree in Business Administration, Auditing, or related field or equivalent combination of training, education and experience

• Master's Degree in related field or equivalent combination of training, education and experience