IT Risk Professional

Freddie Mac•McLean, VA

5d•$87,000 - $131,000

About The Position

The IT Risk Professional is part of Freddie Mac’s Enterprise Operations & Technology Risk Management team, which provides risk management support focused on Service Management and Global Operations (SMGO). The role works with all three lines of defense and business partners on risk-reduction activities. It evaluates risks, assesses control adequacy, supports audits, and looks for ways to streamline processes, including through AI capabilities, within SMGO and other EO&T processes as needed. The position supports leadership priorities in risk reduction, issue remediation, sustainability, and proactively identifying control and process gaps. The role partners with IT stakeholders to understand and manage risks and controls, provides risk exposure reporting to support decision-making, and performs gap and risk assessments. It provides risk insight into identity and access management and ITIL processes, helps develop remediation plans, manages issues through closure, and coordinates audits and examinations. The role also provides risk and control guidance across other EO&T processes as needed.

Requirements

2–4 years of risk, control, compliance, or operational risk experience.
Bachelor’s degree in Management Information Systems or Business Administration with an emphasis in Technology, Computer Science, Accounting Information Systems, or a related field, or equivalent overall experience.
Ability to collaborate effectively with upstream and downstream risk and controls stakeholders and influence outcomes.
Ability to work effectively both in a team environment and individually.
Ability to work creatively and analytically in a problem-solving environment.
Self-motivation, proactive problem-solving, and the ability to manage multiple priorities.

Nice To Haves

Experience in Internal Audit or Information Technology.
Understanding of NIST, SDLC, COBIT, ITIL, ISO, and IT General Controls.
Certification in, or active pursuit of, CISA, CRISC, CISM, CISSP, or other relevant credentials.

Responsibilities

Partner with IT stakeholders to understand and manage risks and controls associated with SMGO processes, serving as a liaison for 1LOD.
Implement sound reporting to provide transparency into risk exposures and support risk-based decision-making.
Perform gap assessments and risk assessments, advise on effective remediation, and drive issues from inception to closure.
Examine documented identity and access management processes and their associated risks and controls.
Provide risk insight for ITIL processes, including change, release, deployment, configuration, incident, and problem management.
Ensure timely development of remediation action plans and support issue lifecycle management from inception to closure.
Coordinate audits and examinations, acting as a liaison between 1LOD and oversight groups.
Provide risk and control guidance across other EO&T processes as needed.
Look for ways to streamline processes, including by leveraging AI capabilities.