IT Risk Professional – Vendor Risk Management
freddie macMcLean (VA)
$87,000 - $131,000
Apply (opens in a new tab)IT Risk Professional – Vendor Risk Management
Posted 3 days ago
freddie macMcLean (VA)
SENIORITY
Manager
SALARY
$87,000 - $131,000
About the role
At Freddie Mac, our mission of Making Home Possible is what motivates us, and it's at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.
Position Overview:
Freddie Mac Home Loan Mortgage Corporation's goal is to make homeownership and rental housing more accessible and affordable. Our mission to provide liquidity, stability, and affordability to the U.S. housing market in all economic conditions extends to all communities from coast to coast. The Enterprise Operations & Technology (EO&T) Risk Governance Team provides risk management support to maturing the EO&T division's model risk governance process, third-party vendor risk governance activities, and the enterprise-wide adoption of AI risk governance framework. We work closely with all three lines of defense, and business partners on a series of risk governance and reduction activities. Our Impact: Administer the enterprise-wide Artificial Intelligence (AI) solution and GenAI use case intake and inventory management processes. Support critical third-party vendor risk management activities, including supplier SOC reviews. Develop and operationalize scalable model governance processes across EO&T division Enhance and maintain technology solutions and operational capabilities that support enterprise AI adoption. Facilitate continuous monitoring and reporting to support compliance with applicable policies, standards, and regulatory requirements.
Your Impact:
- Administer AI solution and GenAI use case intake activities
- Provide guidance and support to end users and stakeholders regarding intake requirements, inventory maintenance, and anomaly resolution.
- Perform supplier risk reviews for designated critical vendors, including SOC report and Enhanced Information Risk Review (EIRR) assessments.
- Support process automation initiatives that improve operational efficiency, scalability, and data quality.
- Participate in AI Clearinghouse enhancements, including requirements gathering, user acceptance testing, and deployment support.
- Participate in operational control testing activities to evaluate control execution effectiveness.
- Prepare management reporting.
- Assist in the development and maintenance of procedures, user guides, job aids, and other operational documentation.
- Collaborate with business, technology, and risk stakeholders to implement process improvements and support operational objectives.
Qualifications:
- Bachelor's degree in computer science, Information Systems, Finance, Risk Management or a related field. Advanced degrees (MBA, MS, or equivalent) preferred.
- Minimum of 3 years of experience in technology, 3rd party, operational risk management, project management, or related governance and compliance functions.
- Previous experience in IT audit, operational risk management, regulatory compliance, or a Big Four consulting environment is preferred.
- Working knowledge of the COSO Internal Control Framework, NIST frameworks and controls, operational risk management principles, and financial industry governance and compliance practices.
- Relevant professional certifications such as CISA, CISSP, CISM, CPA, CIA, Security+, or similar certifications are strongly desired
- Keys to Success in this Role: Strong technical, analytical, problem-solving, and critical thinking skills
- Excellent written, verbal, and interpersonal communication skills. Self-motivated and proactive professional with a strong sense of ownership and accountability
- Ability to adapt changes positively and quickly.
- Ability to manage competing priorities and deliver high-quality results in a fast-paced environment. Ability to work independently while fostering collaboration across diverse teams and stakeholders
- Intellectual curiosity and passion for learning emerging technologies, industry trends, and evolving regulatory requirements
- Strong organizational and project management skills with attention to detail and excellence
- Current Freddie Mac employees please apply through the internal career site.
We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws.
We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation. A safe and secure environment is critical to Freddie Mac's business.
This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk.
Employees exercise this responsibility by executing against policies and procedures and adhering to privacy & security obligations as required via training programs. CA Applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.
Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit and register with our referral code: MAC.Time-type:
Full timeFLSA Status: Non-Exempt
Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site. This position has an annualized market-based salary range of $87,000 - $131,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.
Job Summary
Job number: JR17719Profession: Risk Management
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.