Third Party Risk Management Advisor

Fannie Mae•Reston, VA

4d•Hybrid

About The Position

In this highly influential role, you will contribute to the continued advancement of Third Party Risk Management (TPRM) capabilities, policies, governance, and operating practices. You will work across business, technology, cybersecurity, operational resilience, legal, procurement, and risk functions to address complex third-party and fourth-party risk matters and strengthen enterprise resilience. This role requires strong risk expertise, sound judgment, and the ability to operate effectively across organizational boundaries. You will assess emerging risks and stakeholder needs, provide guidance on complex risk matters, influence cross-functional approaches, and lead high-impact initiatives without relying on direct authority. Your ability to connect business objectives, regulatory expectations, and enterprise risk considerations will help Fannie Mae make informed decisions and continue advancing the maturity and effectiveness of its Third Party Risk Management program.

Requirements

6 years Demonstrated experience assessing and managing complex technology, third-party, or enterprise risk matters.
Experience providing strategic risk advice and recommendations that support significant business or enterprise decisions.
Demonstrated ability to lead complex, cross-functional initiatives and influence outcomes across multiple stakeholder groups without direct authority.
Experience evaluating risk and control considerations and developing well-supported recommendations for management.
Ability to exercise independent judgment when evaluating complex or potentially material risk matters.
Strong communication and stakeholder-management capabilities, including the ability to translate complex risk considerations into clear, actionable recommendations.
Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Nice To Haves

Bachelor degree or equivalent
Significant experience in Third Party Risk Management, third-party technology risk; or a closely related risk discipline
Experience operating within a highly regulated or similarly complex business environment.
Experience advising senior leaders on complex risk matters and influencing decisions across organizational boundaries.
Experience leading enterprise-level risk initiatives involving multiple business, technology, cybersecurity, procurement, legal, operational resilience, or risk stakeholders.
Experience improving risk management governance, processes, data, analytics, automation, or operating practices.
Experience mentoring colleagues, sharing subject-matter expertise, and influencing risk management best practices.

Responsibilities

Anticipate emerging risks, industry trends, and stakeholder needs to proactively evolve TPRM capabilities, policies, and operating models before risks materialize.
Develop and influence enterprise-wide third-party risk strategy by balancing business objectives, regulatory expectations, and risk appetite while recommending strategic tradeoffs and long-term solutions.
Lead complex, cross-functional initiatives that require influencing business, technology, cybersecurity, operational resilience, legal, procurement, and risk partners without direct authority to achieve enterprise outcomes.
Serve as a trusted advisor to senior leadership, translating complex third-party risk information into actionable insights, recommendations, and executive-level reporting that enable informed business decisions.
Drive organizational alignment and accountability by building consensus across diverse stakeholder groups, resolving competing priorities, and ensuring consistent execution of enterprise risk management practices.
Exercise independent judgment on high-impact and ambiguous risk matters, identifying, escalating, and mitigating material third-party risks that could impact business operations, regulatory compliance, or enterprise resilience.
Champion continuous improvement and innovation by identifying opportunities to strengthen data quality, automation, analytics, and governance, advancing the maturity of the Third Party Risk Management program.