Assistant Manager, Asset Based Assessments Controls Assurance

To assist in managing, planning and oversight of Controls Assurance functions for Security matters. Assist the Manager in planning, developing, and implementing frameworks/ measurement methodologies, policies, standards, and procedures related to risk management, specifically asset-based assessments using security standards, and provide quality control. Ensure asset-based programs align with strategic business initiatives, achieve business and quality objectives, mitigate risk, and enhance operating procedures. Implement effective programs and measures designed to identify and mitigate risks and control deficiencies associated with these functions. Promote operational efficiency and service excellence through appropriate risk controls, process improvements and training while reducing and mitigating financial losses. Responsible for consulting with Internal Audit and Compliance on behalf of the Department/ Division. Responsible for NCUA/ Board required risk reviews and regulatory audits. Will oversee and manage the activities of Analysts.

• Assist and coordinate in the development of the Security Division's strategic goals.
• Oversee the process of assessment reviews, root cause analysis, and controls assurance.
• Conceptualize and implement tools, methods, and programs to evaluate security standards controls.
• Partner with senior leadership and various areas within Security and across the enterprise to gather input and assist with the understanding of asset-based security controls.
• Manage and partner on efforts to identify and develop innovative, creative, and strategic initiatives for process improvements. 
• Represent Security Division as Asset Based Assessment Controls Assurance stakeholder in cross-department initiatives.
• Oversee quality control audits to ensure compliance with applicable federal and state laws, rules, regulations, and NFCU policies and procedures.
• Manage the identification of control deficiencies, recommend solutions to strengthen controls, and oversee corrective actions to aid management decisions.
• Collaborate with staff, senior management, and business unit partners to assess and support organization risk mitigation needs by developing strategies, tactics, and quality review solutions.
• Evaluate the adequacy of corrective action taken on past reviews and report on the status of approved recommendations.
• Stays abreast of regulatory compliance standards, new and developing risk trends and best practices.
• Provide feedback to ensure training is in full compliance with all applicable statutory requirements and Navy Federal policies, procedures, rules, regulations, and values.
• Ensure risk control recommendations/solutions support optimal internal/external exam/audit preparedness.
• Acquire, process, parse and occasionally combine diverse information to craft cohesive recommendations and corrective actions.
• Contribute to a culture of collaboration by actively working across business lines and sharing knowledge.
• Perform other ad hoc duties as necessitated by level of risk and priority to the Security Division and Department.
• Perform supervisory/managerial responsibilities.
• Perform other duties as assigned.

• Bachelor's Degree in an Information Technology related field.
• CISA, CRISC, CISSP or other audit and security designations.
• Good understanding of risk management, controls, control testing, and issues management.
• Thorough understanding of control testing methodology and systems.
• Experience managing audits. 
• Significant knowledge of, and proficiency in, data analysis, reporting, and operations research, including the ability to develop conclusions and feasible alternatives to formulate courses of action, including forecasting and cost-benefit analysis.
• Experience managing multi-dimensional teams and projects which involve organization, holding strategy and status meetings, planning, motivating, and managing the work of participants.
• Microsoft ADO, Microsoft Word, Excel, PowerPoint, Visio, and SharePoint knowledge.
• Considerable experience in managing multiple priorities independently and/or in a team environment to achieve goals.
• Working knowledge of banking/financial industry trends, products, and services.
• Knowledge of IT systems, infrastructures, and processes.
• Knowledge of financial institution threat landscape, and current security technologies.