VP, Cybersecurity

Fannie Mae; United States; On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Incentive program

Benefits package

Job summary

Fannie Mae is seeking a Vice President, Cybersecurity to define and execute the enterprise cybersecurity strategy, leading a broad portfolio of capabilities to protect information assets, technology platforms, operations, customers, and reputation in a complex on-prem, cloud and hybrid environment.

You will build and guide high-performing teams across security engineering, risk management, governance, data protection, and vulnerability management, partnering with business and technology leaders

Qualifications

• 10+ years of progressive leadership experience in cybersecurity or related technology disciplines.
• Experience aligning security objectives with business priorities in regulated environments.
• Proven ability to lead organizational transformation, modernization, and risk-aware programs.

Responsibilities

• Lead enterprise cybersecurity strategy and programs.
• Oversee security architecture, engineering, operations, and risk management.
• Partner with business, technology, risk, and audit leaders to align security with objectives.
• Translate security metrics into executive-level insights for senior leadership.

Skills

Cybersecurity leadership

Security governance

Cloud security

Security architecture

Risk management

Cross-functional collaboration

Job description

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description THE IMPACT YOU WILL MAKE

The Vice President, Cybersecurity is a senior cybersecurity executive responsible for helping define and execute Fannie Mae's enterprise cybersecurity strategy. This leader will oversee a broad portfolio of cybersecurity capabilities and programs designed to protect the organization's information assets, technology platforms, business operations, customers, and reputation. The VP will provide strategic leadership across cybersecurity domains, which may include security architecture, engineering, operations, cyber risk management, governance, data protection, cloud security, vulnerability management, and emerging security technologies. The role is responsible for ensuring cybersecurity capabilities remain effective, scalable, resilient, and aligned with business objectives in a complex on-premises, cloud, and hybrid technology environment. This executive will partner closely with business, technology, and risk leaders to strengthen the organization's security posture, drive modernization initiatives, enhance cyber resilience, and ensure compliance with applicable regulatory and industry requirements. The VP will foster a culture of security, operational excellence, innovation, and continuous improvement while leveraging data, automation, and emerging technologies to improve cybersecurity outcomes across the enterprise.

Lead and develop high-performing cybersecurity teams responsible for the strategy, design, implementation, operation, and continuous improvement of enterprise cybersecurity capabilities. Establish and execute enterprise cybersecurity strategies, roadmaps, and programs that align with organizational priorities, business objectives, and evolving threat landscapes. Provide cross-functional leadership across multiple cybersecurity disciplines, which may include security engineering, cyber risk management, governance, security architecture, data protection, cloud security and vulnerability management. Provide executive leadership for emerging cyber risks, including those associated with AI, automation, and advanced digital technologies, ensuring the organization's security posture evolves to address changing threats and business opportunities. Partner with technology and business leaders to integrate security into enterprise initiatives, digital transformation efforts, and emerging technology strategies. Oversee the development, implementation, and maturity of cybersecurity capabilities that protect enterprise infrastructure, applications, data, users, and cloud environments.

Ensure effective cyber threat monitoring, intelligence, detection, incident response, crisis management, and recovery capabilities across the organization. Drive cyber resilience and operational readiness through proactive risk management, security assessments, testing, and continuous improvement programs. Lead the development and execution of cybersecurity governance frameworks, standards, policies, and operating models that support regulatory, compliance, and business requirements. Provide executive oversight of cybersecurity risk management activities, audits, assessments, and remediation efforts, ensuring timely resolution of identified issues. Partner with enterprise risk, compliance, legal, and audit functions to maintain alignment on cybersecurity priorities, controls, and regulatory obligations. Oversee cybersecurity metrics, reporting, analytics, and data-driven decision-making capabilities that enable effective monitoring of security performance and risk. Promote the adoption of innovative technologies, automation, and modern security practices to improve operational effectiveness, scalability, and efficiency. Provide strategic guidance on security architecture and technology decisions to ensure secure, resilient, and sustainable solutions across the enterprise.

Build and maintain strong relationships with internal and external stakeholders, including executive leadership, regulators, industry partners, and third-party service providers. Drive talent development, succession planning, workforce strategy, and organizational effectiveness across the cybersecurity organization. Communicate cybersecurity strategies, priorities, risks, and performance to executive leadership and key stakeholders in clear business terms.

THE EXPERIENCE YOU BRING TO THE TEAM

10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives. Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines. Proven experience developing and executing cybersecurity strategies that align security objectives with business priorities in complex, highly regulated, and evolving environments. Demonstrated ability to lead organizational transformation, technology modernization, and operational improvement initiatives. Experience building strong partnerships and influencing stakeholders across business, technology, risk, audit, and executive leadership functions.

Strong strategic thinking, problem-solving, and analytical capabilities, with the ability to evaluate complex issues, assess risk, and drive effective business and technology solutions. Excellent written, verbal, and executive communication skills, including the ability to translate complex cybersecurity concepts into clear business outcomes and recommendations for senior leaders and executive audiences. Proven ability to lead, develop, and inspire high-performing teams while fostering a culture of collaboration, accountability, innovation, and continuous improvement. Experience managing multiple priorities and delivering results in a fast-paced, dynamic environment. Demonstrated success communicating cybersecurity strategy, risk, and program performance to executive leadership, boards, regulators, and other key stakeholders.

Target Pay Range: $250,000.00 - $350,000.00

Qualifications Education:

The future is what you make it to be.

Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.

Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor.

Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.

The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications.

This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program).

As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.

Tackle America's biggest housing challenges using the latest technology and AI, while collaborating with experts in their fields.

As a Fortune 25 company, Fannie Mae expands access to housing across America.

Powered by the latest tech and AI, our innovative products and services drive the mortgage industry forward.

We believe that prioritizing our people's growth and success is essential to achieving our business goals and fulfilling our purpose.