At Freddie Mac, you will do important work to build a better housing finance system and you'll be part of a team helping to make homeownership and rental housing more accessible and affordable across the nation.

Position Overview:

The Investments & Capital Markets (I&CM) Division at Freddie Mac provides liquidity to the U.S. Mortgage Markets and makes funding more available by purchasing mortgage-related securities guaranteed by Freddie Mac and other financial institutions by issuing corporate debt. The I&CM Risk & Governance controls team supports the division on all matters related to technical and product-related risk management.

This position will help support lead and/or conduct technology-related risk and governance (first line of defense [1LOD]) activities for the I&CM Information and Technology Risk Office. Reporting to the Technology Risk and Controls Director, the successful candidate will support product development and modeling teams, the divisional operational risk group, technology teams, and business partners to assess and report on operational events and issues, liaison on audit and resiliency activities, perform continuous risk assessments, enable proactive risk and governance identification, conduct control design and implementation, perform operational improvement identification and execution, ensure timely remediations, and report to senior management on technology control, governance, risk, and compliance activities.

• Our team is responsible for technology risk and governance activities and execution within Freddie Mac's I&CM division.
• We work closely with partners within Information Risk, Business Technology Office, I&CM, and other divisions to continually mature the firm's risk program.

• Identify and assess technology process risks. Develop and document adequate controls, including supporting establishment, maintenance and validations of SOX, non-SOX technical, and operational controls across I&CM technology activities.
• Prepare, conduct, and document quarterly Risk Control Self-Assessments for relevant business areas.
• Conduct annual technical, model, and business operations control testing to identify gaps and emerging threats, and perform pre-2LOD and/or 3LOD review readiness
• Provide support to the business process during 2LOD oversight activities, Internal Audit exams and FHFA exams.
• Help to assess gaps and emerging threats and perform pre-2LOD and/or 3LOD review readiness.
• Support the technology process in identifying an issue, assessing severity, developing, and tracking remediation action plans.
• Investigate operational risk events, produce concise summaries, and identify remediation activities.
• Update and validate accuracy of risk related data stored in governance risk database.
• Support generation of risk and compliance-related materials for I&CM, IT, ERM, IA and FHFA, including periodic updates and time-sensitive requests.
• Produce periodic reporting on metrics, risk indicators, and divisional technology risk and control issues.
• Develop technical risk procedures, process flows, and job aides, as required.
• Assist in the implementation of risk maturity related activities and identification of operational improvement opportunities.
• Undertake ad-hoc projects, as needed.

• 5 years of risk management, governance, audit, emerging threats, control testing, audit, program governance, artificial intelligence, model risk, and/or data compliance in technology processes (ideal candidate possesses experience in several of these areas-especially in a technical (non-business/operations) capacity).
• Proven ability to investigate, assess risks, and partner with technical and non-technical business owners to determine root cause and remediations (including potential upstream/downstream impacts).
• Experience supporting financial, model risk, and/or product development services desired, but comparable industries acceptable with a willingness to learn.
• Degree in Finance, Risk Management, Information Security, or a technology-related field; or equivalent work experience preferred.
• Experience formulating control language or assessing Sarbanes-Oxley requirements, Risk and Control Self-Assessments (RCSA) and/or proactively identifying potential technical and emerging risks and process improvements.
• Experience defining, documenting, and communicating technical and operational governance.
• Ability to track and report on achievement of plans/projects.
• CIA, CISA, CISSP, CISM, CRISC or other related professional certification preferred (or working towards a certification).

• Proactive with the ability to think holistically and creatively.
• Produces concise, detailed, and insightful documents/write-ups with ability to communicate at different levels.
• Multi-tasker, self-starter, agile, and great teammate.
• Relationship builder, influencer, and maintains a positive attitude.
• Passion for continuous learning, including Capital Markets and emerging technologies
• Staying current on regulations, industry standards, policies, and regulations that may affect the industry and be comfortable with transition and change.