Jobs and Careers

Senior Operations Risk Analyst (Operational Resiliency)

United Statesfull_timeVerifiedPosted 6 Oct 2025

About the role

The Senior Operations Risk Analyst will serve as part of the 2nd Line of Defense, providing independent oversight, challenge, and assurance over the organization’s technology resiliency, operational resilience, and risk management practices. This role will evaluate the adequacy of technology recovery capabilities, system dependencies, and cyber and technical risk controls, ensuring alignment with regulatory requirements, internal policies, and business resiliency objectives.

Provide independent review on IT disaster recovery (DR) plans, technology continuity strategies, and testing activities conducted by 1st Line teams
Review and validate Business Impact Analyses (BIAs), dependency mapping, and recovery objectives (RTOs/RPOs) for accuracy, completeness, and alignment to business tolerances
Evaluate the design and execution of DR and resiliency tests, ensuring scenarios are realistic, risk-based, and include critical dependencies and vendors
Monitor and report on resiliency Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs)
Conduct independent risk assessments on technology and operational resilience practices to identify emerging risks, gaps, or control weaknesses
Translate insights from technology risk trends, vulnerabilities, and incidents into actionable guidance that will help strengthen resiliency practices, such as from software development through to recovery
Participate in audits and compliance & regulatory assessments to ensure adherence to relevant regulations
Ensure third-party/vendor resiliency risks & controls are identified, monitored, and escalated
Support development of governance dashboards and reports for risk committees, senior management, and regulators
Work with internal teams to promote risk & resiliency awareness and drive a culture of risk management across the organization

Bachelor’s degree in Information Technology, Risk Management, Business, or equivalent combination of training, education and experience
3–6 years of experience in Technology Risk, Operational Resilience, Business Continuity, or IT Audit/Assurance
Strong understanding of IT infrastructure, applications, cloud computing, and cybersecurity concepts, with the ability to evaluate resilience from a risk/oversight perspective
Knowledge of risk and resilience frameworks: ISO 22301, NIST SP 800-34, ISO 27001, COBIT, ITIL
Familiarity with regulatory requirements for financial institutions (FFIEC, OCC, DORA, PRA, FCA, GDPR, HIPAA)
Excellent analytical and critical thinking skills with the ability to identify gaps and propose remediation strategies
Strong communication and report-writing skills; able to translate technical risk into business-relevant language for senior leadership
Ability to balance collaboration with independent challenge across IT, cybersecurity, vendors, and business stakeholders

Desired Qualifications

Master’s degree in Risk, Technology, or related field
Relevant certifications such as CBCP, MBCP, CCRP, CISSP, CISM, CRISC, CISA, or ITIL
Experience with security and resilience tools (e.g., SIEM, vulnerability scanning, backup/recovery validation)
Knowledge of cloud resilience and third-party risk management practices

Hours: Monday - Friday, 8:00AM - 4:30PM

Locations: 820 Follin Lane, Vienna, VA 22180 | 5550 Heritage Oaks Dr. Pensacola, FL 32526 | 141 Security Dr. Winchester, VA 22602

Navy Federal provides much more than a job. We provide a meaningful career experience, including a culture that is energized, engaged and committed; and fierce appreciation for our teams, who are rewarded with highly competitive pay and generous benefits and perks.

Our approach to careers is simple yet powerful: Make our mission your passion.