Technology Risk Management - Lead Associate

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to home ownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description As a valued colleague on our team, you will provide risk guidance and support assessments that identify and evaluate technology operational risks that could affect our reputation, resilience, security, regulatory obligations, and financial performance. You will collaborate with key stakeholders across the enterprise to understand business and technology objectives, provide effective challenge, and support risk-informed decisions across RCSA, technology assessments, issue management, event management, artificial intelligence, and data analytics.

THE IMPACT YOU WILL MAKEThe Technology Risk Management - Lead Associate role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:

Key responsibilities include:

Serve as a Technology Operational Risk Lead, providing risk guidance and advise stakeholders across technology processes, systems, and change initiatives.

Support Risk and Control Self-Assessment (RCSA) activities, including risk identification, control evaluation, evidence review, issue escalation, and residual risk analysis.

Conduct technology risk assessments and synthesize findings into clear, decision-ready analyses and reports for business and risk stakeholders.

Support issue management throughout the lifecycle, including root-cause evaluation, remediation planning, milestone monitoring, evidence review, and closure validation.

Support operational risk event management by assessing events, analyzing impacts and trends, documenting lessons learned, and monitoring corrective actions.

Evaluate risks associated with artificial intelligence and emerging technologies, including responsible use, data, model, security, resilience, and governance considerations.

Use data analytics and visualization techniques to identify risk trends, improve monitoring, and communicate actionable insights to stakeholders.

THE EXPERIENCE YOU BRING TO THE TEAM Minimum Required Experiences 4 years of experience in technology risk, operational risk, information technology audit, cybersecurity risk, compliance, or a related field.

Working knowledge of RCSA, technology risk assessments, issue management, and operational risk event management practices.

Strong interpersonal, collaboration, and influencing skills, with the ability to build effective relationships across technology, business, risk, audit, and compliance teams.

Ability to communicate complex risk concepts clearly in written reports, presentations, and discussions with technical and nontechnical stakeholders.

Knowledge of artificial intelligence concepts, associated technology and operational risks, and responsible AI governance practices.

Proficiency in data analysis, including the ability to interpret datasets, identify trends, and develop actionable risk insights using common analytics and visualization tools.

Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Desired Experiences5–10 years of experience in technology risk, operational risk, information technology audit, cybersecurity risk, compliance, or a related field.

Bachelor's degree or equivalent relevant experience.

Experience in financial services or another highly regulated industry.

Experience with governance, risk, and compliance platforms and data visualization tools such as…