At Freddie Mac, you will do important work to build a better housing finance system and you'll be part of a team helping to make homeownership and rental housing more accessible and affordable across the nation.

Position Overview:

The Investments & Capital Markets (I&CM) Division at Freddie Mac provides liquidity to the U.S. Mortgage Markets and makes funding more available by purchasing mortgage-related securities guaranteed by Freddie Mac and other financial institutions by issuing corporate debt. The I&CM Risk & Governance controls team supports the division on all matters related to technical and product-related risk management.

This position will lead and/or conduct technology-related risk and governance (first line of defense [1LOD]) activities for the I&CM Information and Technology Risk Office. Reporting to the Technology Risk and Controls Director, the successful candidate will collaborate with the divisional operational risk group, technology teams, and business partners to assess and report on operational events and issues, orchestrate audit activities, lead continuous risk assessments, conduct control design and implementation, perform operational improvement identification and execution, manage remediation enforcement, and report to senior management on technology control, governance, risk, and compliance activities. Apply now to learn about our excellent benefits and why there's #moreatfreddiemac!

• Our team is responsible for technology risk and governance activities and execution.
• We work closely with partners within Information Risk, Business Technology Office, I&CM, and other divisions to continually mature the firm's risk program.

• Identify and assess technology process risks. Develop and document adequate controls, including supporting establishment, maintenance and validations of SOX, non-SOX technical, and operational controls across I&CM technology activities.
• Assess gaps and emerging threats and perform pre-2LOD and/or 3LOD review readiness.
• Prepare, conduct, and document quarterly Risk Control Self-Assessments for technology processes.
• Provide support to the business process during 2LOD oversight activities, Internal Audit exams and FHFA exams.
• Support the technology process in identifying an issue, assessing severity, developing, and tracking remediation action plans.
• Proactively stay abreast of business/market changes/trends that may impact technology and associated risks. Discuss and resolve potential risks with relevant stakeholders.
• Provide risk and controls input for I&CM new business and governance initiatives.
• Conduct root cause and impact analysis of operational risk events. Identify remediation activities and produce concise write-ups for Senior Management.
• Generate risk and compliance-related materials for I&CM, IT, ERM, IA and FHFA, including periodic updates and time-sensitive requests.
• Review and validate accuracy of information documented in the risk database and enterprise governance repository.
• Develop technical risk procedures, job aides and process flows for the division.
• Produce periodic reporting on risk indicators, and divisional technology risk and control issues.
• Challenge status quo. Find opportunities to improve and streamline existing processes.
• Undertake ad-hoc projects as needed.

• 5- 10 years of risk management, governance, audit, emerging threats, program governance, artificial intelligence, and/or data compliance in technology processes (ideal candidate possesses experience in several of these areas).
• Proven ability to investigate, assess risks, and partner with technical and non-technical business owners to determine root cause and remediation (including potential upstream/downstream impacts).
• Experience supporting financial and/or product development services desired, but comparable industries acceptable with a willingness to learn.
• Degree in Finance, Risk Management, Information Security, or a technology-related field; or equivalent work experience preferred.
• Experience implementing, formulating control language, or assessing Sarbanes-Oxley requirements, Risk and Control Self-Assessments (RCSA) and/or proactively identifying potential technical and emerging risks and process improvements.
• Experience defining, documenting, and communicating technical and operational governance.
• Ability to track and report on achievement of plans/projects.
• CIA, CISA, CISSP, PMP, CISM, CRISC or other related professional certification preferred (or working towards a certification).

• Proactive with the ability to think holistically and creatively.
• Produces concise, detailed, and insightful documents/write-ups with ability to communicate at different levels.
• Multi-tasker, self-starter, agile, and standout colleague.
• Relationship builder, influencer, and maintains a positive attitude.
• Passion for continuous learning, including Capital Markets, emerging technologies, and program process improvement opportunities.
• Staying current on regulations, industry standards, policies, and regulations that may affect the industry and be comfortable with transition and change.