Enterprise Operational Risk - Technology Risk Management - Principal (Work Remote Option)

Company Description

At Fannie Mae, futures are made. The inspiring work we do helps make a home a possibility for millions of homeowners and renters. Every day offers compelling opportunities to impact the future of the housing industry while being part of an inclusive team thriving in an energizing, flexible environment. Here, you will grow your career and help create access to fair, affordable housing finance.

Job Description

As a valued contributor to our team, you will consult with the team and management in assessing and identifying potential risks that may threaten our reputation, safety, security, and/or financial success, as well as consult on communicating and collaborating with key stakeholders across the enterprise, and understand business objectives.
THE IMPACT YOU WILL MAKE
The Enterprise Operational Risk - Risk Management - Principal role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:

• Consult with team to implement and interpret methods, models, and analytical templates used to determine business areas that pose potential risks to the enterprise and make process recommendations to management.
• Advise management on the impact of proposed risks to the enterprise, and recommend for updates and changes.
• Recommend changes and updates to management about processes to reduce risk using rigorous analysis.
• Collaborate with management to make recommendations on resolutions and control guidelines.
• Partner with management to develop business strategies, and make decisions that will drive success in the face of shifting consumer behaviors and regulations

Qualifications

THE EXPERIENCE YOU BRING TO THE TEAM
Minimum Required Experiences

• 8 years of experience in the Financial Services Industry

Desired Skills & Experiences

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Risk Management, or related field.
• Active Certification: CISA, CISM, CRISC or CISSP 
• Demonstrated experience evaluating and advising on the impact of technology risks to the enterprise including IT architecture, cloud adoption/operations/governance (specifically AWS), disruptive technologies (e.g., artificial intelligence, block chain, machine learning, data science),
• DevOps, IT asset management, configuration and change management, incident management, networking, and agile systems development/ life cycle management domains
• Experience in performing risk and control assessments including control testing (compliance, Audit, SOX, operational risk, or related function), evaluating processes, identifying controls, and analyzing operational and design effectiveness.
• Partner with risk management functions to help ensure proper execution of established frameworks, policies, standards, strategies such as risk appetite and Risk and Control self-assessments (RCSA), Issue Management add Operational Risk Events 
• Comprehensively assess risks and gather insights from issues and events across technology business areas to provide an aggregated risk assessment.
• Compliance and regulatory knowledge: Familiarity with regulations, standards, and frameworks (e.g, FFIEC, NIST CSF, ISO/IEC 27001, COSO, CIS, COBIT, ITIL)
• Audit and Assurance: Experience auditing IT systems and controls, conducting assessments and ensuring compliance with organizational policies and external regulations
• Skilled in data analytics, obtaining data from multiple sources and analyzing in a concise manner. 
• High level of business acumen across a sector of financial services, with ability to combine business and technical topics into meaningful reports and/or presentations.
• Current with industry trends, emerging technologies and regulatory developments affecting technology risk management.
• Hands on experience working with Cloud technologies, Infrastructure, Network Security, and/or modern deployment technologies and products including by not limited to CI/CD pipelines, Open-Source software, Artificial Intelligence and/or Machine Learning preferred. 
• Experience with Cybersecurity and Resiliency related risk and control frameworks
• Establish and refresh risk metrics and indicators for effective continuous monitoring of technology risk against Fannie Mae’s risk appetite
• Prepare monthly risk appetite reporting for Management-Level Committee and Board materials by developing and presenting risk perspectives on changing or out-of-appetite risk profiles for senior management audiences.
• Technical Certifications a plus: CCSP, CompTIA Cloud+, CCNP, AWS Certified Solutions Architect, Microsoft Certified Azure Developer or Engineer, Google Professional Cloud Network Engineer
• Google Professional Cloud Network Engineer
• Technical Acumen: AWS experience 

Tools

• Skilled in creating visual concepts and content and preparing executive level presentations.
• Experience using Archer or equivalent Governance, Risk and Compliance tool.
• Advanced Excel knowledge.
• Experience using Cloud Audit tools.

Additional Information

Reference ID:REF13040U

The future is what you make it to be. Discover compelling opportunities at careers.fanniemae.com.

Fannie Mae is primarily a hybrid company. We embrace flexibility for our employees while providing office space for in-person work and collaboration. This role is classified as Remote. If you speak with a Recruiter, they will provide you with more information about the definition of this classification.

Fannie Mae is an Equal Opportunity Employer, which means we are committed to fostering a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, religion, national origin, gender, gender identity, sexual orientation, personal appearance, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation in the application process, email us at [email protected].

The hiring range for this role is set forth on each of our job postings located on Fannie Mae's Career Site. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee’s physical, mental, emotional, and financial well-being. See more here.