Cybersecurity Risk Manager (Hybrid or Remote Work)

$138,000 - $206,000/Yr

Freddie Mac - McLean, VA

Full-time - Senior

McLean, VA

Credit Intermediation and Related Activities

About the position

The Cybersecurity Risk Manager at Freddie Mac plays a crucial role in enhancing the company's cybersecurity and risk management capabilities. This position involves providing oversight and advisory services for the Information Security programs, developing and monitoring cybersecurity policies, and collaborating with various teams to manage risks effectively. The role is designed for individuals passionate about cybersecurity and technical risk, offering opportunities to work with cutting-edge technologies while contributing to the mission of making housing finance more accessible and affordable.

Responsibilities

• Provide oversight and challenge function for the Information Security programs of the IT division and other lines of business.
• Review Information Security operations, solutions, and architecture to identify risks and evaluate the effectiveness of cybersecurity capabilities.
• Enhance and mature Risk Management practices by supporting the development of enterprise-wide cybersecurity policies and standards.
• Provide oversight and advisory services to first line partners regarding the application of standard requirements across various technologies to manage risk.
• Support the development and execution of controls to monitor cybersecurity compliance and drive organizational change.
• Develop effective and measurable metrics (KRI, KPI, and KCI) to analyze data and proactively identify trends or new/emerging risks.
• Execute risk analytics and reporting.
• Provide advisory consultation to lines of businesses and make course of action recommendations to manage risk.
• Collaborate with key risk areas, business partners, and IT counterparts to design action plans to address Cybersecurity and IAM risk.
• Lead program execution with documented project plans, expectations, and schedules.
• Provide status reports, escalation, and impediment resolution when needed.
• Support the Director in leading and managing the team; mentor and guide team members.

Requirements

• Bachelor's Degree and 8+ years of experience in IT security areas such as penetration testing, operations, threat intelligence, monitoring, vulnerability management, identity access management, or security engineering in large enterprises.
• Formal big 4 Cybersecurity Risk Consulting, Audit, or Assurance experience preferred.
• Industry-leading Certifications preferred: CISSP, CISA, CRISC, CISM, CEH, and/or CIPT.
• Prior experience in Cybersecurity Operational Risk Management, supporting CISO in deployment and sustainment of cybersecurity capabilities.
• Knowledge of cloud migration, AI, security, and access management experience preferred.
• Demonstrate proficiencies in cybersecurity domains and working knowledge of industry security standards such as NIST or ISO.

Nice-to-haves

• Experience with AI and cloud security solutions.
• Strong leadership and communication skills.

Benefits

• Competitive compensation
• Market-leading benefit programs
• Annual incentive program