Position Overview:

The Treasury Governance team within the Investments & Capital Markets Division governs and provides risk management over the end-to-end payment process at Freddie Mac. Our team is a successful team that combines both business knowledge and technology expertise to provide valuable risk management and advisory services to the end-to-end payment process owners at Freddie Mac. Are you someone who loves to challenge the status quo and use your critical mind to play a meaningful role in driving modern risk management activities? As part of the First Line of Defense, this individual will work closely with technology partners (e.g., Information Security, Application Support, etc.) and payment process owners across Freddie Mac as well as the Second and Third Line of Defense. Apply now and learn why there’s #MoreAtFreddieMac!

Our Impact:

• Sets the Corporate Policy that include business and technology requirements that governs the end-to-end payment process.
• Collaborate with IT partners and relevant process owners to understand and manage payment risks and controls associated with the end-to-end payment process.
• Provide transparency of risk exposures through implementing sound reporting for risk-based decision making.

Your Impact:

• Accountable for driving a centralized comprehensive governance program over the company’s cash payment activities focusing on managing IT risks related to payment systems.
• With a focus on IT risk, maintain Payment Risk Management Framework, Risk Assessment approach and Risk Appetite and metrics that conforms with internal and industry leading practices, standards, and specifications.
• Oversee Divisions’ implementation of Payment-related IT control requirements.
• Support periodic corporate aggregation assessments of unmitigated payment risks across the company, including using threat modeling approaches to identify new threats.
• Support periodic assessments of the end-to-end design of controls for all payment processes.
• Support department’s operational risk and control self-assessment, issue management and liaise with internal audit.

Qualifications:

• 8-10 years of operational risk/process management and/or audit experience. Experience must include 4 years in Information Technology or Information Security domain and 2 years of management and leadership experience.
• Bachelor’s degree in Information Systems, Business Administration, Accounting, Computer Science, or related field; or equivalent work experience.
• Implementation, risk review or compliance review experience of industry standards/best practices/frameworks, e.g., COBIT, NIST, ISO, FAIR, ITIL, COSO, MITRE ATT&CK, threat modeling.
• Platform and application audit experience to include experience with the various infrastructure platforms (e.g., Windows, Unix, Oracle), databases, cloud security, and container security.
• Previous big four experience and/or relevant professional certifications (CISSP, CISA, CISM, Security , CIA, CPA, etc.) desired.
• Knowledge of mortgage industry and financial service payment processes desired.

Keys to Success in this Role:

• Ability to employ critical thinking coupled with attention to detail to work in a problem-solving environment.
• Sound consultation and communications skills to optimally work with a diverse group of partners.
• Self-motivated, pro-active, and possess deep curiosity to learn about the latest trends and how to do things better.
• Excel in a team environment as well as individually
• Sense of humor!