Information and AI Risk Governance Lead

Freddie Mac•McLean, VA

13d

About The Position

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: As an Information and AI Risk Governance Lead, you will: Serve as the primary risk and governance advisor for Human Resources and Legal information AI and Information risk management activities. Lead governance activities supporting responsible AI adoption, including intake reviews, inventories, risk assessments, enhanced reviews, and stakeholder engagement. Partner with business leaders to identify, assess, and mitigate information-related risks impacting critical HR and Legal processes. Drive regulatory, audit, examination, and issue remediation activities to strengthen governance and compliance outcomes. Promote effective records management, privacy, cybersecurity awareness, and information stewardship practices across supported divisions. Develop governance reporting and risk insights that inform leadership decision-making and strengthen organizational accountability.

Requirements

Bachelor’s Degree or equivalent experience in Information Management, Risk Management, Information Security, Business Administration, or a related field.
8+ years of experience in risk management, governance, compliance, privacy, information security, records management, information management, or related disciplines.
Demonstrated experience supporting audits, examinations, regulatory findings, and issue remediation efforts.
Experience working with sensitive information, including employee, legal, confidential, or regulated data.
Strong understanding of information risk management, privacy governance, AI governance, records management, and cybersecurity principles.
Proven ability to influence business leaders and drive governance outcomes across multiple organizations.
Exceptional written and verbal communication skills, including executive-level presentations and reporting.
Strong team player and ability to communicate clearly and concisely to senior leadership.
Strong influencing skills and ability to lead change and deliver results; Ability to multi-task and prioritize.
Apply data-driven insights to advise on risk perspectives, demonstrating intellectual agility and interpersonal flexibility.
Exhibit strong situational analysis and decision-making abilities.
Communicate effectively—both written and verbal—across all levels of the organization, including through impactful visualizations.

Responsibilities

Serve as the primary risk and governance advisor for Human Resources and Legal information management activities.
Lead governance activities supporting responsible AI adoption, including reviews, inventories, risk assessments, enhanced reviews, and stakeholder engagement.
Partner with business leaders to identify, assess, and mitigate information-related risks impacting critical HR and Legal processes.
Drive regulatory, audit, examination, and issue remediation activities to strengthen governance and compliance outcomes.
Promote effective records management, privacy, cybersecurity awareness, and information stewardship practices across supported divisions.
Develop governance reporting and risk insights that inform leadership decision-making and strengthen organizational accountability.
Manage AI risk governance activities, including intake assessments, inventory management, risk assessments, and enhanced review processes.
Provide consultation to HR and Legal stakeholders regarding AI governance requirements, risks, controls, and responsible use expectations.
Coordinate awareness events, open office sessions, training activities, and governance communications supporting responsible AI adoption.
Lead support for audits, regulatory examinations, management action plans, and issue remediation efforts affecting HR and Legal AI and Legal risk.
Coordinate closure package deliverables to ensure regulatory and internal audit commitments are met.
Oversee privacy inventories, Privacy Impact Assessments (PIAs), and privacy incident coordination activities.
Partner with Privacy and Compliance teams to ensure adherence to enterprise privacy requirements and regulatory expectations.
Support records retention, file plan governance, annual records reviews, and information lifecycle management activities.
Coordinate records management compliance efforts and stakeholder engagement related to information retention and disposition requirements.
Facilitate recertification activities involving SharePoint, user access governance, third-party information repositories, and information management platforms.
Partner with Information Security teams on Data Loss Prevention (DLP), phishing awareness, and related information protection initiatives.
Monitor and escalate emerging information security risks impacting HR and Legal information assets.
Support implementation and monitoring of controls designed to protect sensitive employee, legal, and confidential business information.
Lead phishing awareness activities.