Technology Risk Management - Lead Associate

Fannie Mae • Plano, TX

1d • $123,000 - $161,000 • Hybrid

About The Position

As a valued colleague on Fannie Mae’s technology risk team, the Technology Risk Management - Lead Associate provides risk guidance and supports assessments to identify and evaluate technology operational risks that could affect the company’s reputation, resilience, security, regulatory obligations, and financial performance. The role collaborates with stakeholders across the enterprise to understand business and technology objectives, provide effective challenge, and support risk-informed decisions across RCSA, technology assessments, issue management, event management, artificial intelligence, and data analytics.

The role serves as a Technology Operational Risk Lead, advising stakeholders across technology processes, systems, and change initiatives. It supports risk and control assessments, technology risk assessments, issue and event management, and evaluation of emerging technology risks. The position also uses data analysis and visualization to identify risk trends and communicate actionable insights.

The role is eligible to participate in a Fannie Mae incentive program, subject to its terms. The hiring range is $123,000 to $161,000. Fannie Mae offers a broad range of health, life, voluntary lifestyle, and other benefits and perks intended to support employees’ physical, mental, emotional, and financial well-being. For most roles, employees are expected to work onsite regularly at their designated office; the manager determines the in-office cadence. Proximity within a reasonable commute is preferred unless the position is noted as open to remote.

Requirements

• At least 4 years of experience in technology risk, operational risk, information technology audit, cybersecurity risk, compliance, or a related field.
• Working knowledge of RCSA, technology risk assessments, issue management, and operational risk event management practices.
• Strong interpersonal, collaboration, and influencing skills, with the ability to build effective relationships across technology, business, risk, audit, and compliance teams.
• Ability to communicate complex risk concepts clearly in written reports, presentations, and discussions with technical and nontechnical stakeholders.
• Knowledge of artificial intelligence concepts, associated technology and operational risks, and responsible AI governance practices.
• Proficiency in data analysis, including interpreting datasets, identifying trends, and developing actionable risk insights using common analytics and visualization tools.
• Curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how work is done.
• Bachelor’s degree required, or equivalent relevant experience as indicated in the desired experience qualifications.

Nice To Haves

• 5–10 years of experience in technology risk, operational risk, information technology audit, cybersecurity risk, compliance, or a related field.
• Experience in financial services or another highly regulated industry.
• Experience with governance, risk, and compliance platforms and data visualization tools such as Power BI or Tableau.
• Familiarity with technology and cybersecurity frameworks such as NIST, COBIT, or similar industry standards.
• Relevant certification such as CRISC, CISA, CISSP, or an equivalent risk, audit, or technology credential.

Responsibilities

• Serve as a Technology Operational Risk Lead, providing risk guidance and advising stakeholders across technology processes, systems, and change initiatives.
• Support Risk and Control Self-Assessment (RCSA) activities, including risk identification, control evaluation, evidence review, issue escalation, and residual risk analysis.
• Conduct technology risk assessments and synthesize findings into clear, decision-ready analyses and reports for business and risk stakeholders.
• Support issue management throughout the lifecycle, including root-cause evaluation, remediation planning, milestone monitoring, evidence review, and closure validation.
• Support operational risk event management by assessing events, analyzing impacts and trends, documenting lessons learned, and monitoring corrective actions.
• Evaluate risks associated with artificial intelligence and emerging technologies, including responsible use, data, model, security, resilience, and governance considerations.
• Use data analytics and visualization techniques to identify risk trends, improve monitoring, and communicate actionable insights to stakeholders.

Benefits

• Incentive program participation, subject to program terms.
• Broad range of health, life, voluntary lifestyle, and other benefits and perks supporting physical, mental, emotional, and financial well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior