Navy Federal Credit Union is looking to evaluate and validate IT and Information Security controls across the organization to ensure strong cybersecurity practices and regulatory compliance.
Requirements
- Basic understanding of security risks, processes, and controls
- Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001/27002, SANS/CIS 20, PCI DSS) is a plus
- Knowledge of federal and state regulations (FFIEC, NIST, GLBA, etc.) is beneficial
- Experience with data tools such as Axonius, Tenable, Splunk is a plus
- Comfortable working with large datasets and presenting findings
- Experience in technical writing or documentation is a plus
Responsibilities
- Assist in planning and scoping Asset Based Assessments
- Participate in walk-throughs with business partners to understand control environments
- Help develop test strategies and document work in alignment with audit standards
- Support documentation of issues and reporting of assessment results
- Contribute to peer reviews and stakeholder communications
- Analyze data to identify trends and support strategic recommendations
- Assist in evaluating security control design and remediation efforts
Other
- Currently pursuing a degree from an accredited college or university
- Anticipated graduation date of December 2026 or later
- Strong verbal, written, and interpersonal communication skills
- Effective planning, organizational, and problem-solving abilities
- Ability to work independently and think critically