IT Risk Professional – Vendor Risk Management

Freddie Mac•McLean, VA

19h

About The Position

Freddie Mac’s Enterprise Operations & Technology (EO&T) Risk Governance Team provides risk management support for the division’s model risk governance process, third-party vendor risk governance activities, and enterprise-wide adoption of an AI risk governance framework. The team works with the three lines of defense and business partners on risk governance and reduction activities. The IT Risk Professional supports enterprise AI and GenAI intake and inventory management, critical third-party vendor risk reviews, and scalable model governance processes. The role also helps enhance technology solutions and operational capabilities that support enterprise AI adoption, and facilitates monitoring and reporting for compliance with applicable policies, standards, and regulatory requirements.

Requirements

Bachelor’s degree in computer science, Information Systems, Finance, Risk Management, or a related field.
Minimum of 3 years of experience in technology, third-party or operational risk management, project management, or related governance and compliance functions.
Working knowledge of the COSO Internal Control Framework, NIST frameworks and controls, operational risk management principles, and financial industry governance and compliance practices.
Strong technical, analytical, problem-solving, and critical-thinking skills.
Excellent written, verbal, and interpersonal communication skills.
Self-motivated and proactive, with a strong sense of ownership and accountability.
Ability to adapt positively and quickly to change.
Ability to manage competing priorities and deliver high-quality results in a fast-paced environment.
Ability to work independently while fostering collaboration across diverse teams and stakeholders.
Strong organizational and project management skills, attention to detail, and commitment to excellence.

Nice To Haves

Advanced degree (MBA, MS, or equivalent).
Previous experience in IT audit, operational risk management, regulatory compliance, or a Big Four consulting environment.
Relevant professional certifications such as CISA, CISSP, CISM, CPA, CIA, Security+, or similar certifications.
Intellectual curiosity and an interest in emerging technologies, industry trends, and evolving regulatory requirements.

Responsibilities

Administer AI solution and GenAI use case intake activities and inventory management processes.
Provide guidance and support to end users and stakeholders on intake requirements, inventory maintenance, and anomaly resolution.
Perform supplier risk reviews for designated critical vendors, including SOC report and Enhanced Information Risk Review (EIRR) assessments.
Support process automation initiatives to improve operational efficiency, scalability, and data quality.
Participate in AI Clearinghouse enhancements, including requirements gathering, user acceptance testing, and deployment support.
Participate in operational control testing to evaluate control execution effectiveness.
Prepare management reporting.
Assist in developing and maintaining procedures, user guides, job aids, and other operational documentation.
Collaborate with business, technology, and risk stakeholders to implement process improvements and support operational objectives.
Support continuous monitoring and reporting for compliance with applicable policies, standards, and regulatory requirements.