VP, Technology, Data, and Third-Party Risk Oversight

Fannie Mae•Washington, DC

1d•Onsite

About The Position

The VP, Technology, Data, and Third-Party Risk Oversight is responsible for independent second line oversight across key operational risk domains, with a focus on deep-dive risk assessments, clear risk articulation, and business-relevant issue identification. Primary areas of oversight include: Data Management Risk, Technology Risk, and Third-Party Risk. This role is accountable for delivering high-quality risk insights, including comprehensive risk assessments, well-developed narratives, and actionable issue statements that clearly convey risk impact to the business and senior leadership. The VP will lead a team of domain-aligned risk experts with deep subject matter knowledge across technology, data, and third-party ecosystems. The leader will maintain a strong understanding of applicable laws and regulations, industry practices, and the Company’s core technology, data, and third-party environments, enabling effective oversight of risks, controls, and emerging trends.

Requirements

12+ years of experience in operational risk management, with strong focus on technology, data, and third-party risk domains, including leadership experience in complex, regulated environments or financial institutions.
Demonstrated ability to perform deep analytical risk assessments and translate findings into clear, compelling narratives and business issues.
Proven strength in risk reporting and storytelling, including experience presenting to senior leadership and governance forums.
Deep subject matter expertise across one or more domains: Technology (infrastructure, applications, cloud), Data (governance, quality, lineage, usage) and Third-party/vendor risk.
Experience operating within a second line risk function, providing independent oversight and effective challenge.
Strong understanding of regulatory expectations and experience supporting regulatory interactions and exams.
Ability to connect technical and operational risks to business impact and outcomes.
Experience building and leading high-performing teams with strong analytical and communication capabilities.
Excellent written and verbal communication skills, with emphasis on clarity, structure, and executive-level messaging.
Familiarity with financial services and how technology, data, and third-party risks intersect with business operations.

Responsibilities

Build, lead, and develop a team of risk professionals with deep domain expertise across technology, data, and third-party risk.
Conduct and oversee deep-dive risk assessments that evaluate both the quality and impact of risk across domains.
Develop clear, concise, and well-structured risk reports and narratives tailored for senior leadership, committees, and the Board.
Apply deep subject matter expertise across: Technology environments and platforms, Data management, governance, and usage, Third-party/vendor ecosystems.
Translate complex risk findings into business-relevant issues, ensuring clarity of impact, root cause, and required actions.
Identify emerging risks and evolving risk themes, proactively assessing impacts to the business.
Ensure consistent, high-quality issue identification, documentation, and escalation aligned to risk frameworks.
Drive improvements in risk assessment methodologies, reporting quality, and narrative clarity.
Provide independent challenge to the first line and influence risk-based decision making.
Support and enhance risk governance practices, including alignment to the three lines of defense model.
Contribute to policies, standards, and procedures to strengthen risk management practices and reduce exposure.
Engage with regulators, audit, and internal stakeholders, providing clear and credible risk perspectives.