Senior Manager, IT Risk Management & Controls

$91,800 - $228,800/Yr

PenFed Credit Union - McLean, VA

Full-time - Manager

Remote - McLean, VA

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Senior Manager, IT Risk Management & Controls at PenFed Credit Union is responsible for ensuring compliance with federal regulations and enhancing the risk management framework. This role involves collaborating with various departments to strengthen risk management and controls, acting as a subject matter expert, and supporting the organization's operational effectiveness strategy.

Responsibilities

• Monitor adherence to internal policy and procedure and regulations including Federal and State requirements.
• Serve as a subject matter expert for Issues Management, collaborating with IT and business areas to identify issues and develop action plans.
• Act as an advisor and SME to senior stakeholders and team members.
• Engage with application owners and management to provide internal and external audit support.
• Provide system and operations recommendations related to IT controls and business controls.
• Engage with various departments to meet strategic goals.
• Support IT and Business Operations-related policies and assist with change management processes.
• Monitor quality of IT and business areas through vendors and control reporting to identify risk trends.
• Maintain expert knowledge of financial services industry and recommend changes to benefit the credit union.
• Identify and manage existing and emerging risks in operations.
• Monitor and track business process controls for risk mitigation.
• Engage in continual departmental process improvement.
• Assist with Operations Risk, Control Self-Assessments, and process mapping.
• Train and mentor employees/contractors on quality controls.

Requirements

• Bachelor's degree or five (5) years of Technology Risk Management experience in a financial services environment.
• Strong technical acumen with a preferred software development background.
• Understanding of the Software Development Lifecycle.
• Knowledge of emerging technologies such as Cloud, AI/Machine Learning.
• Experience in business process, risk, and controls documentation.
• Familiarity with Federal regulations including Reg CC, DD, E and Z, BSA, CIP and UDAAP.

Nice-to-haves

• CRISC, CISA certifications preferred.

Benefits

• Robust medical, dental, and vision plan options.
• Plenty of paid time off.
• 401k with employer match.
• On-site fitness facilities at larger locations.