Information Security Risk - Risk Management - Advisor

Fannie Mae•Plano, TX

1d•$141,000 - $184,000•Onsite

About The Position

In this first-line risk role, you will provide risk management expertise with a particular focus on Identity and Access Management (IAM). You will partner with stakeholders across the enterprise to assess potential risks, evaluate processes and controls, and provide thoughtful, data-informed guidance that supports sound business decisions. Your ability to connect risk considerations with business objectives will help strengthen how the organization manages information security risk in a highly regulated environment.

Requirements

6 years of relevant professional experience in risk management, information security risk, or a related discipline.
Demonstrated experience assessing risk, evaluating processes or controls, and using analysis to inform risk management decisions.
Experience collaborating with stakeholders and communicating risk considerations to support business decisions.
Ability to understand business objectives and apply sound judgment when evaluating risk.
Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Nice To Haves

Experience working with information security risk in a complex organizational environment.
Experience supporting or partnering with Identity and Access Management functions.
Experience providing advisory guidance to business, risk, or management stakeholders.
Experience operating in an environment where business decisions must account for evolving risk and regulatory considerations.

Responsibilities

Advise on methods, models, and analytical approaches used to identify, assess, and evaluate information security risks, with an emphasis on risks related to Identity and Access Management.
Partner with business and risk stakeholders to evaluate potential risks and understand their impact on the enterprise.
Review processes and controls to identify opportunities to reduce risk and strengthen risk management practices through rigorous analysis.
Provide informed guidance and feedback to management on risk resolutions, control guidelines, and related risk management decisions.
Collaborate with stakeholders across the enterprise to communicate risk considerations clearly and support effective decision-making.
Apply sound judgment to assess risk within the context of business objectives, priorities, and the broader operating environment.
Contribute to the development and evaluation of business strategies by incorporating relevant information security and risk considerations.
Help the organization respond effectively to evolving business conditions, risk considerations, and regulatory expectations.