Job Information

Technology Governance and Strategy is seeking an Associate to help oversee Application Operations, Infrastructure, and Enterprise Architecture domains’ compliance, regulations, and risk-based controls. The successful candidate is responsible for gathering, identifying, prioritizing, monitoring, and reporting specified domains risks and controls including performing risk and controls assessments.

This individual will be working in a high-performing technical environment and will work closely with the business and technology teams to develop a strong understanding of the business in order to have specialized domains risk-based discussions. This relationship will ensure a focus on the right risk priorities. The ideal candidate will be a strong risk management & business acumen who can bridge the gap between business and technology and can understand operational impact. A well-qualified candidate will be comfortable working with executive and technical leadership around the company to embed a security-focused mindset in all areas.

The position provides an opportunity to participate in an energetic and fast paced environment using the latest in technology and tools to build and secure an advanced financial services processing platform running in a virtual cloud-based datacenter. This position will report to the CTO First Line Risk Manager assigned to the same specified domains.

Key Job Functions

• Act as a trusted advisor and partner in risk-based decision making with Business, IT, and domain stakeholders in CSS and in our client investor organizations (Fannie Mae and Freddie Mac).
• Understand and articulate risks associated with technology processes and IT general controls and identify process and control gaps proactively.
• Liaise across relevant business, technology, and control functions to prioritize risks, challenge technology risk decisions, assumptions, and tolerances, and drive appropriate risk response.
• Provide support for the various internal and external audits that affect Information Security to ensure response timely.
• Contribute to the establishment of metrics and tools to assess and report on inherent risks, control strength and residual risk in a consistent and objective manner.
• Perform 1st Line testing activities within assigned domains to validate the effectiveness, design, and implementation of controls; working with control owners to identify compensating controls to document mitigation and remediation plans.
• Assist assigned control owners in performing Risk and Controls Self Assessments
• Assist assigned control owners with periodic and timely execution of controls
• Assist control owners with audit remediation activities
• Assist with the development and validation of remediation plans for technology deficiencies by providing effective challenge.
• Monitor internal and external business, regulatory and technology environment to identify new or emerging risks and verify remediation of issues.
• Coordinate with Legal/Compliance, Enterprise Risk Management, and Internal Audit functions for appropriate impact analysis.