IT Risk Professional

Freddie Mac•McLean, VA

4d•$87,000 - $131,000

About The Position

This role is part of Freddie Mac’s Enterprise Operations & Technology Risk Management team, which provides risk management support focused on Service Management and Global Operations (SMGO). The team works with the three lines of defense and business partners to reduce risk. The IT Risk Professional evaluates risks, assesses control adequacy, supports audits, and identifies opportunities to streamline processes, including through AI capabilities. The role supports leadership priorities involving risk reduction, issue remediation, sustainability, and proactive identification of control and process gaps. The position partners with IT stakeholders to manage risks and controls associated with SMGO processes and provides transparency into risk exposures for risk-based decisions. It conducts assessments, advises on remediation, manages issues through closure, and provides risk and control guidance across EO&T processes as needed. This is a full-time, non-exempt position with an annualized market-based salary range of $87,000–$131,000 and eligibility for the annual incentive program.

Requirements

2–4 years of risk, control, compliance, or operational risk experience.
Bachelor’s degree in Management Information Systems or Business Administration with an emphasis in Technology, Computer Science, Accounting Information Systems, or a related field, or equivalent overall experience.
Ability to collaborate effectively with upstream and downstream risk and controls stakeholders and influence outcomes.
Ability to excel both in a team environment and individually.
Ability to work creatively and analytically in a problem-solving environment.
Self-motivation, proactive problem-solving, and the ability to manage multiple priorities.

Nice To Haves

Experience in Internal Audit or Information Technology.
Understanding of NIST, SDLC, COBIT, ITIL, ISO, and IT General Controls.
Certification in, or active pursuit of, CISA, CRISC, CISM, CISSP, or other relevant credentials.

Responsibilities

Partner with IT stakeholders to understand and manage risks and controls associated with SMGO processes, serving as a liaison for the first line of defense (1LOD).
Implement sound reporting to provide transparency into risk exposures and support risk-based decision-making.
Perform gap assessments and risk assessments, advise on effective remediation, and drive issues from inception to closure.
Examine documented identity and access management processes and their associated risks and controls.
Provide risk insight for processes within ITIL modules, including change, release, deployment, configuration, incident, and problem management.
Ensure timely development of remediation action plans and support issue lifecycle management from inception to closure.
Coordinate audits and examinations, acting as a liaison between 1LOD and oversight groups.
Provide risk and control guidance across other EO&T processes as needed.
Look for ways to streamline processes, including by leveraging AI capabilities.