IT Third Party Risk Professional

Freddie Mac•McLean, VA

About The Position

Freddie Mac Home Loan Mortgage Corporation’s goal is to make homeownership and rental housing more accessible and affordable. Our mission to provide liquidity, stability, and affordability to the U.S. housing market in all economic conditions extends to all communities from coast to coast. The Enterprise Operations & Technology (EO&T) Third Party Risk Management Team provides risk management support to the EO&T division at Freddie Mac. We work closely with all three lines of defense, and business partners on third party risk governance and reduction activities. Third Party Risk management encompasses evaluating suppliers across all operational risk domains including: Information, Technology, Operational Resiliency, Processes/Transactions, Models, Reporting and Fourth Party. We are seeking a senior third party risk professional who can independently assess complex supplier risks, apply sound judgment, and deliver clear, risk-based recommendations through strong partnership, ownership, and critical thinking. In this role, you will independently assess complex supplier risks, apply sound judgment, and deliver clear, risk-based recommendations through strong partnership, ownership, and enterprise thinking. This is an opportunity for a high-performing professional who thrives in a dynamic environment and can translate risk insights into practical action. Our Impact: Engage and collaborate with business stakeholders to understand their risk exposure and support their third-party risk. Foster a risk-driven culture across the division and encourage innovation. Unlock value in operational risk using tools, technologies, and methodologies. Drive strong operational third-party risk management knowledge and practices across EO&T that enables the business to make informed, risk-based decisions.

Requirements

Bachelor's Degree in a relevant field such as Computer Science, Information Technology
2-5 years of demonstrated ability in one or more of the following areas: operational risk management, information and technology risk management, third party risk, and supplier management.
Experience engaging with a broad range of stakeholders and partners.
Familiarity with the COSO, SOC2 Type II, NIST control framework and other risk management industry best practices.
Excellent communication and people skills.
Motivated and initiative-taking problem solver.
Ability to apply sound judgment and critical thinking in a dynamic environment
Ability to navigate competing priorities.
Ability to work independently or within a collaborative team environment.
Deep curiosity to learn about latest trends and how to do things better

Nice To Haves

Relevant professional certifications CISA, CISSP, Security+, CISM, CPA, CIA, etc. is a plus.

Responsibilities

Support the execution of third party risk activities in alignment with enterprise standards and regulatory expectations.
Monitor enterprise critical third parties, assess changes in supplier risk, and identify emerging issues.
Perform risk assessments and support mitigation planning, contingency plan documentation and supplier findings management
Communicate material risks, themes, and insights to stakeholders and senior management in a clear, actionable manner.
Find opportunities for operational improvements and streamline existing processes.