<p>ABOUT:</p> <p>People helping people. That's what a credit union, and in particular Navigant Credit Union, is all about. Our mission is to improve the financial well-being of the families, businesses, and communities we serve, and have been since our founding in 1915.</p> <p>Now at more than $3 billion in assets, Navigant Credit Union is among the largest credit unions in Rhode Island, yet still maintain our community-driven values.</p> <p>Those values-and our belief in putting people first-are just a few of the reasons why Navigant Credit Union has been named "Rhode Island's Best Place to Work" year-after-year by the Providence Business News.</p> <p>Our Core Values consist of "Leadership, Unity, Caring, and Integrity" are the guiding principles for our organization. They are the qualities and/or traits that we consider a high priority for Navigant Credit Union employees.</p> <p>Our company prides itself on demonstrating community-based values and investing in our workforce, while exceeding member expectations. We offer tremendous opportunities for professional development, career advancement, and a best-in-class benefits package including a rich medical and dental plan, vision benefits, a robust 401(k) with a generous employer match, tuition reimbursement, competitive salaries, paid volunteer days, and opportunities to give back to the community.</p> <p>If you believe you'd be a great fit, and are interested in joining our team, submit an application today!</p> <p>ABOUT THIS ROLE:</p> <p>Under general supervision, this position provides a high level of support to the VP, Information Security Officer to ensure the success of the Enterprise Risk and Information Security Programs across the Credit Union.</p> <p>WHAT YOU WILL DO:</p> <ol> <li>Assists the VP, ISO in validating strong information security controls is in place to include clean desk scans, </li></ol> <p>educational efforts for employees and members.</p> <ol start="2"> <li>Assists in ensuring policies and procedures are up to date, considering enhancements, regulatory changes, </li></ol> <p>and industry best practices.</p> <ol start="3"> <li>Performs independent user access reviews while working with business line leaders to ensure that reviews are </li></ol> <p>completed timely and that internal user access policies are followed.</p> <ol start="4"> <li>Performs due diligence reviews on all existing and new third parties, partnering with subject matter experts and </li></ol> <p>business lines as appropriate.</p> <ol start="5"> <li>Monitors due dates for ongoing due diligence and contracts. Coordinates with business lines to retrieve for </li></ol> <p>timely reviews.</p> <ol start="6"> <li>Assists in maintaining the risk management tool including the coordination of annual risk assessments and </li></ol> <p>analyzing results.</p> <ol start="7"> <li>Assists in the management of the Business Continuity Plan including development of training and tabletop </li></ol> <p>exercises.</p> <ol start="8"> <li>Develops holistic and "real-time" ERM reports including, but not limited to, KRI Reports and Heat Maps. </li></ol> <p>Provides meaningful analysis of trends and recommends solutions as applicable.</p> <ol start="9"> <li>Assists in the annual development of the Risk Appetite Statement, monitoring for needed adjustments based </li></ol> <p>on KRI Reporting and Strategic Initiative alignment.</p> <ol start="10"> <li>Performs annual key control testing for high-risk areas to ensure the Credit Union's financial success and </li></ol> <p>confidentiality, integrity, and availability of data is not jeopardized, impeding its reputation, safety, or</p> <p>security. Analyzes results and provides recommendations to reduce risk posture.</p> <ol start="11"> <li>Utilizing the email alerting tool, assists with reviews of suspicious emails, analyzing trends, and reporting </li></ol> <p>metrics.</p> <ol start="12"> <li> <p>Stays up to date with the latest industry threats and regulatory changes.</p> </li><li> <p>Performs other duties as assigned by the VP, Information Security Officer.</p> </li></ol> <p>QUALIFICATIONS:</p> <p>Education</p> <p>High School diploma or GED equivalent required. Bachelor's degree, with a concentration in/focus on risk,</p> <p>information assurance or audit, preferred.</p> <p>Experience/Skills/Knowledge:</p> <ol> <li>1-3 years of experience in risk management or information security, preferably in a credit union or financial </li></ol> <p>institution required.</p> <ol start="2"> <li> <p>Experience with enterprise risk management technology preferred.</p> </li><li> <p>Excellent organizational, analytical, and problem-solving skills required.</p> </li><li> <p>Must have the ability to handle multiple projects/ priorities simultaneously with an effective outcome.</p> </li><li> <p>Excellent verbal, written, and interpersonal communication skills, including ability to communicate risks and</p> </li></ol> <p>concepts to business lines outside the Risk Department.</p> <ol start="6"> <li> <p>Must have strong service orientation in alignment with the credit union's mission and core values.</p> </li><li> <p>Must be a self-motivator and have a strong accountability mindset.</p> </li><li> <p>Understanding of regulatory requirements including GLBA and FFIEC Guidance preferred.</p> </li><li> <p>Must have the ability to deal with highly confidential information.</p> </li><li> <p>Must be PC proficient, including Microsoft Office (Word, Excel, PowerPoint, Outlook) and the Internet.</p> </li></ol>