Position Overview:Responsible for security architecture and engineering of applications, tools and technologies; security controls testing and/or forensic investigations, identity and access management controls; and automation. Employs extensive professional expertise as a generalist or specialist. Develops resolutions to complex problems that require the frequent use of ingenuity and creativity. Work is accomplished without appreciable direction. Exerts considerable latitude in determining technical objectives of assignment. Serves as the organization spokesperson on specialized projects or programs. Acts as counselor to top management and customers on advanced technical research studies and applications. College Degree or equivalent experience; advanced studies/degree preferred. Typically has 8-10 years related experience.
Our Impact:Will develop and train the enterprise on relevant IAM best practices, develop and support automated IAM processes, and develop and implement ongoing IAM risk and efficiency improvements with limited oversight by managers. The role will work closely with Enterprise partners and security control owners on IAM automation development activities and alignment of IAM processes with InfoSec maturity targets as described in the InfoSec Strategy.
Your Impact:Applies expertise to develop and implement new and updated risk and control frameworks for all IAM activities. Manages the portfolio and full lifecycle of existing IAM controls. Develops and proposes (for management and stakeholder review) strategies to reduce security risk and improve controls in the organization by implementing procedural prevention, detection, and response measures, while still enabling positive business outcomes.
Qualifications:- 8-10 years' related experience
- Bachelor's degree in a technology-related field or equivalent work experience
- Knowledge and experience with modern, data-driven risk analysis processes, techniques, and tools preferably in the Financial Services Industry
- Excellent written and verbal communication. Ability to communicate effectively with all stakeholders including directors, managers, system engineers, and end users
- Ability to develop and clearly articulate risk management objectives and outcomes to key business stakeholders
- Ability to work collaboratively, establish credibility and working relationships with stakeholders and partners (within the division and throughout the corporation) to ensure a shared outcome
- Ability to present ideas in a business-friendly and user-friendly language
- Team-oriented interpersonal skills with the ability to effectively communicate and interact with a broad range of peoples and roles
- Candidate must also be comfortable supporting audit inquiries and evidence requests and presenting audit-ready reference documentation.
Keys to Success in this Role:The successful candidate for this forward-looking role will be proficient with industry best practices and tools for risk management/formal Government Risk Controls (GRC), Issue management, control frameworks, control testing, and automation. This role will lead a small team of analysts to carry out the full spectrum of risk management activities across all functional areas, with a heavy focus on forensic data analysis and automated data-driven testing of controls.
Current Freddie Mac employees please apply through the internal career site.Time-type:Full time
FLSA Status:Exempt
Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market-leading benefit programs. Information on these benefit programs is available on our Careers site.
This position has an annualized market-based salary range of $150,000 - $224,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.
