VP, Cybersecurity

Fannie Mae•Reston, DC

7d•Onsite

About The Position

The Vice President, Cybersecurity is a senior cybersecurity executive responsible for helping define and execute Fannie Mae's enterprise cybersecurity strategy. This leader will oversee a broad portfolio of cybersecurity capabilities and programs designed to protect the organization's information assets, technology platforms, business operations, customers, and reputation. The VP will provide strategic leadership across cybersecurity domains, which may include security architecture, engineering, operations, cyber risk management, governance, data protection, cloud security, vulnerability management, and emerging security technologies. The role is responsible for ensuring cybersecurity capabilities remain effective, scalable, resilient, and aligned with business objectives in a complex on-premises, cloud, and hybrid technology environment. This executive will partner closely with business, technology, and risk leaders to strengthen the organization's security posture, drive modernization initiatives, enhance cyber resilience, and ensure compliance with applicable regulatory and industry requirements. The VP will foster a culture of security, operational excellence, innovation, and continuous improvement while leveraging data, automation, and emerging technologies to improve cybersecurity outcomes across the enterprise.

Requirements

10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives.
Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.
Proven experience developing and executing cybersecurity strategies that align security objectives with business priorities in complex, highly regulated, and evolving environments.
Demonstrated ability to lead organizational transformation, technology modernization, and operational improvement initiatives.
Experience building strong partnerships and influencing stakeholders across business, technology, risk, audit, and executive leadership functions.
Strong strategic thinking, problem-solving, and analytical capabilities, with the ability to evaluate complex issues, assess risk, and drive effective business and technology solutions.
Excellent written, verbal, and executive communication skills, including the ability to translate complex cybersecurity concepts into clear business outcomes and recommendations for senior leaders and executive audiences.
Proven ability to lead, develop, and inspire high-performing teams while fostering a culture of collaboration, accountability, innovation, and continuous improvement.
Experience managing multiple priorities and delivering results in a fast-paced, dynamic environment.
Demonstrated success communicating cybersecurity strategy, risk, and program performance to executive leadership, boards, regulators, and other key stakeholders.

Responsibilities

Lead and develop high-performing cybersecurity teams responsible for the strategy, design, implementation, operation, and continuous improvement of enterprise cybersecurity capabilities.
Establish and execute enterprise cybersecurity strategies, roadmaps, and programs that align with organizational priorities, business objectives, and evolving threat landscapes.
Provide cross-functional leadership across multiple cybersecurity disciplines, which may include security engineering, cyber risk management, governance, security architecture, data protection, cloud security and vulnerability management.
Provide executive leadership for emerging cyber risks, including those associated with AI, automation, and advanced digital technologies, ensuring the organization's security posture evolves to address changing threats and business opportunities.
Partner with technology and business leaders to integrate security into enterprise initiatives, digital transformation efforts, and emerging technology strategies.
Oversee the development, implementation, and maturity of cybersecurity capabilities that protect enterprise infrastructure, applications, data, users, and cloud environments.
Ensure effective cyber threat monitoring, intelligence, detection, incident response, crisis management, and recovery capabilities across the organization.
Drive cyber resilience and operational readiness through proactive risk management, security assessments, testing, and continuous improvement programs.
Lead the development and execution of cybersecurity governance frameworks, standards, policies, and operating models that support regulatory, compliance, and business requirements.
Provide executive oversight of cybersecurity risk management activities, audits, assessments, and remediation efforts, ensuring timely resolution of identified issues.
Partner with enterprise risk, compliance, legal, and audit functions to maintain alignment on cybersecurity priorities, controls, and regulatory obligations.
Oversee cybersecurity metrics, reporting, analytics, and data-driven decision-making capabilities that enable effective monitoring of security performance and risk.
Promote the adoption of innovative technologies, automation, and modern security practices to improve operational effectiveness, scalability, and efficiency.
Provide strategic guidance on security architecture and technology decisions to ensure secure, resilient, and sustainable solutions across the enterprise.
Build and maintain strong relationships with internal and external stakeholders, including executive leadership, regulators, industry partners, and third-party service providers.
Drive talent development, succession planning, workforce strategy, and organizational effectiveness across the cybersecurity organization.
Communicate cybersecurity strategies, priorities, risks, and performance to executive leadership and key stakeholders in clear business terms.