IT Risk Professional

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.

Position Overview:

This role is within the Enterprise Operations &Technology Risk Management team, which provides comprehensive risk management support with a focus on Identity and Access Management (IAM). We work closely with all three lines of defense, and business partners on risk reduction activities.

You will leverage your expertise to evaluate risks, assess adequacy of controls, provide audit support, and continually look for ways to streamline processes, including leveraging AI capabilities, within IAM and other EO&T processes as needed. What’s more, you will use your risk management experience to support leadership in achieving our top priorities of risk reduction, issue remediation, driving sustainability, and proactively identifying control/process gaps. Apply now and learn why there’s #MoreAtFreddieMac!

Our Impact:

· Partner with our IT Stakeholders to understand and manage risks and controls associated with IAM processes, serving as a liaison for 1LOD.

· Provide transparency of risk exposures through implementing sound reporting for risk-based decision making.

· Perform gap assessments, risk assessments, and advise on effective remediation, driving issues from inception to closure.

Your Impact:

In this role, you will be expected to:

· Understand and examine documented identity and access management processes and the associated risks & controls

· Provide risk insight for various IAM principles (e.g., user access lifecycle, access review and recertifications, Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), Separation of Duties (SoD), Just-in-Time (JIT) access, user authentication/authorization, etc)

· Ensure timely development of remediation action plans and support issue lifecycle management from inception to closure

· Coordinate audits and exams, acting as a liaison between 1LOD and oversight groups

· Provide risk and control guidance across other EO&T processes, as needed

Qualifications:

· 2-4 years of risk, control, compliance, or operational risk experience. Experience in Internal Audit, Information Technology, or Identity and Access Management is preferred

· Bachelor’s degree in Management Information Systems or Business Administration, with an emphasis in Technology, Computer Science, Accounting Information Systems, related field, or equivalent overall experience

· Ability to effectively collaborate with upstream and downstream risk and controls stakeholders and influence outcomes

· Understanding of NIST, SDLC, COBIT, ITIL, ISO, IT General Controls is preferred

· Understanding of IAM solutions using Sailpoint

· Certification in, or active pursuit of, one or more of the following is preferred: CISA, CRISC, CISM, CISSP, or other relevant credentials.

Keys to Success in this Role:

· Excel in a team environment as well as individually

· Work creatively and analytically in a problem-solving environment

· Self-motivated, proactive problem solver with the capability of managing multiple priorities

Current Freddie Mac employees please apply through the internal career site.

We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

A safe and secure environment is critical to Freddie Mac’s business. This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk. Employees exercise this responsibility by executing against policies and procedures and adhering to privacy & security obligations as required via training programs.

CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.

Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.