Cybersecurity Risk Senior Analyst

Freddie Mac

11h • $111,000 - $167,000

About The Position

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Continue your career journey where your work contributes to a greater purpose.
Position Overview:
Are you passionate about cybersecurity and technical risk? At Freddie Mac, we offer a career that allows you to do rewarding work with newest technologies, while growing your cybersecurity and risk management skillsets!
Our Impact:
As part of Freddie Mac’s Enterprise Risk (ER) Division, the Technology Risk Management Team provides 2nd Line of Defense oversight of the company’s Cybersecurity and Identity Access Management (IAM) efforts.
We are looking for a team member who can join us in supporting the development, validation and monitoring of cyber security capabilities.
Your Impact:
By bringing your expertise and skills to our team, you will be able to impact the development and execution of the oversight efforts and provide support for the core functions within ER.
Your responsibilities will fall into two primary categories:
Cybersecurity and IAM Risk Management
Enhance and mature Risk Management practices by supporting the development of enterprise-wide cybersecurity policies and standards
Provide oversight and advisory services to 1st line partners regarding the application of standard requirements across a wide variety of technologies to manage risk.
Support the development and execution of controls to monitor cybersecurity compliance and drive organizational change
Develop effective and measurable metrics (KRI, KPI and KCI) to analyze data and proactively identify trends or new/emerging risks
Execute risk analytics and reporting
Provide advisory consultation to lines of businesses and make course of action recommendations to manage risk
Leadership/Oversight
Effectively challenge our 1st line of defense technology teams while collaborating with the 3rd line of defense and internal 2nd line partners.
Collaborate with key risk areas, business partners, and IT counterparts to design action plans to address Cybersecurity and IAM risk
Autonomously lead program execution with documented project plans, expectations and schedule
Provide status reports, escalation and impediment resolution when needed
Support the Director in leading and managing the team

Requirements

• Bachelor’s Degree or equivalent experience
• 5+ years of relevant experience
• Some industry leading Certifications preferred: CISSP, CISA, CRISC, CISM, CEH, and/or CIPT
• Prior experience in IT Operational Risk Management methodologies and principles, previous big four experience preferred
• Minimum of 5 years+ working in and/or auditing IT security areas such as penetration testing, operations, threat intelligence, monitoring, vulnerability management or security engineering in large enterprises.
• Knowledge of cloud migration, security and access management experience preferred
• Demonstrates proficiencies and comfortable working in the previously stated cybersecurity domains.
• Working knowledge of industry security standards and guidance such as NIST or ISO
• Capable of working independently and within a collaborative team environment
• Must demonstrate the ability to deliver effective verbal, written and interpersonal communication skills.

Nice To Haves

• Ability to think broadly but also be detail-oriented
• Ability to understand and work with a diverse group of stakeholders within all lines of defense
• Direct experience with IT, privacy data and management practices/processes
• Self-motivated, pro-active and results driven problem solver with the capability to managing multiple priorities without heavy supervision
• Ability to think analytically to develop solutions in an ambiguous and fast paced environment

Responsibilities

• Enhance and mature Risk Management practices by supporting the development of enterprise-wide cybersecurity policies and standards
• Provide oversight and advisory services to 1st line partners regarding the application of standard requirements across a wide variety of technologies to manage risk.
• Support the development and execution of controls to monitor cybersecurity compliance and drive organizational change
• Develop effective and measurable metrics (KRI, KPI and KCI) to analyze data and proactively identify trends or new/emerging risks
• Execute risk analytics and reporting
• Provide advisory consultation to lines of businesses and make course of action recommendations to manage risk
• Effectively challenge our 1st line of defense technology teams while collaborating with the 3rd line of defense and internal 2nd line partners.
• Collaborate with key risk areas, business partners, and IT counterparts to design action plans to address Cybersecurity and IAM risk
• Autonomously lead program execution with documented project plans, expectations and schedule
• Provide status reports, escalation and impediment resolution when needed
• Support the Director in leading and managing the team

Benefits

• Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.
• This position has an annualized market-based salary range of $111,000 - $167,000 and is eligible to participate in the annual incentive program.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level