Information Security Technical Lead; Hybrid in Office

Position Overview

The Information Security Policy & Reporting Tech Lead provides hands‑on experience across all information security domains and direct interactions with cybersecurity and technology management. The tech lead focuses on defining and socializing changes to security requirements, establishing implementation guidance and compliance reporting, and preparing various cybersecurity related reports for management, the board of directors and the regulator.

Security Policy & Reporting Team defines and maintains clear security requirements to improve overall security posture and align expectations across stakeholder groups. We also support security service owners in providing leadership and timely, informative security reporting to risk partners and regulators. Our objectives are:

• Position leadership to make timely and informed risk decisions based on current threats and control deficiencies in the organization.
• Improve accountability with security service owners, asset owners, and individual users throughout the organization.
• Fulfill Information Security's reporting obligations to business technology partners, risk management teams, senior management and regulators.

• Establish relationships with information security and risk management teams, becoming a trusted adviser for cybersecurity risk, control, and reporting challenges.
• Maintain a comprehensive understanding of the firm's information security processes and controls, and consult process owners as new initiatives, risks, threats, control activities and issues emerge.
• Define and socialize changes to enterprise Information Security requirements by working with security service owners, other IT departments and business stakeholders to propose changes, assess impact, refine implementation approach and establish compliance reporting.
• Build presentations on top risks, trends and internal controls for senior IT leadership, risk oversight and cross‑business consumption.
• Work independently, as part of a Security Policy & Reporting team or in collaboration with other security teams.
• Ensure work is completed on time and in alignment with professional standards.
• Stay abreast of current business and industry trends relevant to our industry.
• Leverage data analytics and automation knowledge to enhance current security requirement and reporting processes.
• Maintain technical knowledge through ongoing research and review of industry publications.

• 8+ years working experience, including a minimum of 5 years in information security.
• Extensive knowledge of cybersecurity frameworks (NIST, ISO, etc.) and Dev Ops concepts.
• Security certifications such as CISA, CRISC or CISSP.
• Relevant degree in Management Information Systems, Business Administration with an emphasis in Technology, Computer Science, Accounting Information Systems or a related discipline.

• Critical thinking and problem‑solving skills.
• Ability to deep dive into any cybersecurity process.
• Ability to work with stakeholders from many IT, cybersecurity and risk management disciplines.
• Excellent professional writing skills and verbal communications to executive leadership.
• Ability to work well under minimal supervision while maintaining calmness and clarity under pressure.

Time‑type:
Full time

FLSA Status:
Exempt

Freddie Mac offers a comprehensive total rewards package to include competitive compensation and market‑leading benefit programs. Information on these benefit programs is available on our Careers site. This position has an annualized market‑based salary range of $127,000 - $191,000 and is eligible to participate in the annual incentive program. The final salary offered will generally fall within this range and is dependent on various factors including but not limited to the responsibilities of the position, experience, skill set, internal pay equity and other relevant qualifications of the applicant.

We are an equal opportunity employer and value diversity and inclusion at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by applicable law. We will ensure that individuals with differing abilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.

Please contact us to request accommodation.