IT Risk Professional – Vendor Risk Management

Freddie Mac•McLean, VA

1d•$87,000 - $131,000

About The Position

Freddie Mac’s Enterprise Operations & Technology (EO&T) Risk Governance Team supports the division’s model risk governance process, third-party vendor risk governance activities, and enterprise-wide adoption of the AI risk governance framework. The team works with all three lines of defense and business partners on risk governance and reduction activities. This role administers AI solution and GenAI use case intake and inventory processes, supports critical third-party vendor risk reviews, and contributes to scalable model governance processes and technology solutions that enable enterprise AI adoption. It also supports continuous monitoring and reporting for compliance with applicable policies, standards, and regulatory requirements.

Requirements

Bachelor’s degree in computer science, Information Systems, Finance, Risk Management, or a related field.
At least 3 years of experience in technology, third-party or operational risk management, project management, or related governance and compliance functions.
Working knowledge of the COSO Internal Control Framework, NIST frameworks and controls, operational risk management principles, and financial industry governance and compliance practices.
Strong technical, analytical, problem-solving, and critical-thinking skills.
Excellent written, verbal, and interpersonal communication skills.
Self-motivated and proactive, with a strong sense of ownership and accountability.
Ability to adapt positively and quickly to change.
Ability to manage competing priorities and deliver high-quality results in a fast-paced environment.
Ability to work independently and collaborate across diverse teams and stakeholders.
Strong organizational and project management skills, with attention to detail and excellence.
Intellectual curiosity and interest in learning about emerging technologies, industry trends, and evolving regulatory requirements.

Nice To Haves

Advanced degree (MBA, MS, or equivalent).
Previous experience in IT audit, operational risk management, regulatory compliance, or a Big Four consulting environment.
Relevant professional certifications such as CISA, CISSP, CISM, CPA, CIA, Security+, or similar certifications.

Responsibilities

Administer AI solution and GenAI use case intake activities and inventory management processes.
Guide and support end users and stakeholders on intake requirements, inventory maintenance, and anomaly resolution.
Perform supplier risk reviews for designated critical vendors, including SOC report and Enhanced Information Risk Review (EIRR) assessments.
Support process automation initiatives to improve operational efficiency, scalability, and data quality.
Participate in AI Clearinghouse enhancements, including requirements gathering, user acceptance testing, and deployment support.
Participate in operational control testing to evaluate the effectiveness of control execution.
Prepare management reporting.
Assist in developing and maintaining procedures, user guides, job aids, and other operational documentation.
Collaborate with business, technology, and risk stakeholders to implement process improvements and support operational objectives.
Facilitate continuous monitoring and reporting to support compliance with applicable policies, standards, and regulatory requirements.