Senior Director, Cyber Risk Oversight & Tech Governance

ITSMF; Reston (VA); Sur place; USD 200 000 - 269 000; Plein temps

Résumé du poste

Fannie Mae is seeking a Senior Director of Cybersecurity Risk Oversight Lead to advance the CRCD's independent cybersecurity risk oversight strategy and serve as a 2LOD leader overseeing governance, risk assessment, appetite, issue management, and executive reporting.

The role partners with enterprise leadership and control functions to ensure risks are identified, measured, monitored, and reported, including emerging technologies like AI, frontier models, autonomous agents, and quantum

Qualifications

• 10+ years of experience in cybersecurity risk management, technology risk, information security, or related fields.
• 5+ years leading cybersecurity or risk management teams.
• Experience providing independent oversight and credible challenge of risk management programs.
• Experience developing cybersecurity risk assessments, executive reporting, dashboards, and governance materials.
• Experience engaging with executive leadership, regulators, and governance committees.

Responsabilités

• Lead independent oversight of the enterprise cybersecurity risk management program and provide credible challenge to governance.
• Oversee assessment, aggregation, monitoring, and reporting of cybersecurity risks enterprise-wide.
• Establish cybersecurity risk metrics, KRIs, and risk appetite measures.
• Develop executive dashboards, scorecards, and board-level risk reporting.

Connaissances

Cybersecurity risk management

Executive communication

Regulatory engagement

Leadership

Risk governance

Formation

Bachelor's degree

Master's degree

Outils

NIST CSF

ISO 27001

CISSP

AWS

Description du poste

Fannie Mae is seeking a Senior Director of Cybersecurity Risk Oversight Lead to advance the CRCD's independent cybersecurity risk oversight strategy and serve as a 2LOD leader overseeing governance, risk assessment, appetite, issue management, and executive reporting.

The role partners with enterprise leadership and control functions to ensure risks are identified, measured, monitored, and reported, including emerging technologies like AI, frontier models, autonomous agents, and quantum