Job Description
Company Description: At Fannie Mae, futures are made. The inspiring work we do makes an affordable home a reality and a difference in the lives of Americans. Every day offers compelling opportunities to impact the future of the housing industry while being part of an inclusive team thriving in an energizing environment. Here, you will help lead our industry forward and make your career. Job Description: As a valued colleague on our team, you will contribute to assessing and identifying potential risks that may threaten our reputation, safety, security, and/or financial success, as well as collaborate with team in communicating and collaborating with key stakeholders across the enterprise, and understanding business objectivesTHE IMPACT YOU WILL MAKEThe Technology Risk - Risk Management - Senior Associate role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:* Determine business areas that pose potential risks to the enterprise. * Evaluate the impact of proposed risks to the enterprise.* Monitor and report on information and processes to reduce risk using rigorous analysis.* Document and report on resolutions and control guidelines.* Partner with the team to review business strategies, and make decisions that will drive success in the face of shifting consumer behaviors and regulations.Qualifications: THE EXPERIENCE YOU BRING TO THE TEAMMinimum Required Experiences* 2-4 years of relevant experience* Proficient understanding of AWS and Azure service offerings.* Experience with identifying and assessing risks within Cloud environments, including the unique risks associated with SaaS, PaaS, and IaaS implementations.* Working knowledge of DevSecOps practices and requirements for control automation of CI/CD pipelines.* Experience with assessing FedRAMP, NIST Risk Management Framework (RMF) and NIST Cyber Security Framework (CSF).* Experience performing cybersecurity control assessments, identifying control gaps, and assisting management with conducting root cause analysis.* Solid time management and the ability to understand and follow internal control testing methodology in planning, testing, and reporting procedures. * Demonstrate ability to understand business processes and how they align to internal policy, standards, procedures, and regulatory requirements. * Strong critical thinking abilities while evaluating an organization's risk and controls. * Proactively identify process improvements that will improve risk assessments and controls. * Working with people with different functional expertise respectfully and cooperatively to work toward a common goal Desired Experiences* Bachelor's degree or equivalent.* Having experience with Information Security Risk for a Financial Services company or Big 4.* Certifications: CISA, CRISC, CIA, CISM, and/or CISSP are a plus.Additional Information: The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.Fannie Mae is an Equal Opportunity Employer, which means we are committed to fostering a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, religion, national origin, gender, gender identity, sexual orientation, personal appearance, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation in the application process, email us at 6007H