Job Description As a valued contributor to our team, you will consult with the team and management in assessing and identifying potential risks that may threaten our reputation, safety, security, and/or financial success, as well as consult on communicating and collaborating with key stakeholders across the enterprise, and understand business objectives. THE IMPACT YOU WILL MAKEThe Enterprise Operational Risk - Risk Management - Principal role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:
Consult with team to implement and interpret methods, models, and analytical templates used to determine business areas that pose potential risks to the enterprise and make process recommendations to management.
Advise management on the impact of proposed risks to the enterprise, and recommend for updates and changes.
Recommend changes and updates to management about processes to reduce risk using rigorous analysis.
Collaborate with management to make recommendations on resolutions and control guidelines.
Partner with management to develop business strategies, and make decisions that will drive success in the face of shifting consumer behaviors and regulations
Qualifications THE EXPERIENCE YOU BRING TO THE TEAMMinimum Required Experiences
8 years
Desired Experiences
Bachelor’s degree in Computer Science, Information Technology, Information Systems, Risk Management, or related field
Active Certification: CISA, CISM, CRISC or CISSP
Technical Certifications a plus: CCSP, CompTIA Cloud+, CCNP, AWS Certified Solutions Architect, Microsoft Certified Azure Developer or Engineer, Google Professional Cloud Network Engineer
Technical Acumen: AWS experience is required
Skills
Risk Assessment and Management including evaluating and designing technology controls, conducting impact assessments, identifying control gaps, and developing risk management strategies. Experience performing Risk and Control Assessments.
Compliance and regulatory knowledge: Familiarity with regulations, standards, and frameworks (e.g, FFIEC, NIST CSF, ISO/IEC 27001, COSO, CIS, COBIT, ITIL)
Audit and Assurance: Experience auditing IT systems and controls, conducting assessments and ensuring compliance with organizational policies and external regulations
Communication and Stakeholder Management: Strong interpersonal skills to communicate risk-related concepts effectively to all levels of technical and non-technical stakeholders
Skilled in data analytics, obtaining data from multiple sources and analyzing in a concise manner.
High level of business acumen across a sector of financial services, with ability to combine business and technical topics into meaningful reports and/or presentations.
Current with industry trends, emerging technologies and regulatory developments affecting technology risk management.
Hands on experience working with Cloud technologies, Infrastructure, Network Security, and/or modern deployment technologies and products including by not limited to CI/CD pipelines, Open-Source software, Artificial Intelligence and/or Machine Learning preferred.
Tools
Skilled in creating visual concepts and content and preparing executive level presentations.
Experience using Archer or equivalent Governance, Risk and Compliance tool
Advanced Excel knowledge
Experience using SharePoint.
Skilled in Visio
Experience using Cloud Audit tools
Fannie Mae is an Equal Opportunity Employer, which means we are committed to fostering a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, religion, national origin, gender, gender identity, sexual orientation, personal appearance, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation in the application process, email us at [email protected].