Technology Risk - Risk Management - Principal

About this role

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

In this highly influential role, you will help shape the strategic direction of Third Party Risk Management (TPRM) capabilities, policies, governance, and operating practices. You will work across business, technology, cybersecurity, operational resilience, legal, procurement, and risk functions to address complex third-party and fourth-party risk matters and strengthen enterprise resilience. This role requires more than deep risk expertise. You will anticipate emerging risks and stakeholder needs, advise senior leaders on complex risk decisions, influence enterprise-wide approaches, and lead high-impact initiatives without relying on direct authority. Your ability to connect business objectives, regulatory expectations, and enterprise risk considerations will help Fannie Mae make informed decisions and continue advancing the maturity and effectiveness of its Third Party Risk Management program.

The Way You Will Make a Difference • Shape the strategic direction of Third Party Risk Management capabilities, policies, governance, and operating models by anticipating emerging risks, industry trends, and evolving stakeholder needs. • Influence enterprise third-party risk strategy by evaluating business objectives, regulatory expectations, and risk considerations and recommending strategic tradeoffs, governance enhancements, and sustainable solutions. • Lead highly complex, cross-functional risk initiatives involving stakeholders across business, technology, cybersecurity, operational resilience, legal, procurement, and risk functions. • Serve as a strategic advisor to senior leadership by providing forward-looking perspectives and recommendations on complex third-party and fourth-party risk matters. • Exercise independent judgment to identify, assess, escalate, and support mitigation of material third-party risks that could affect business operations, regulatory compliance, security, reputation, financial success, or enterprise resilience. • Build alignment across organizations by navigating competing priorities, influencing stakeholders, and helping establish consistent approaches to Third Party Risk Management across the enterprise. • Drive continuous improvement in Third Party Risk Management governance, data, automation, analytics, processes, and risk management practices to strengthen program effectiveness and maturity. • Strengthen organizational risk capability by sharing expertise, mentoring peers, influencing best practices, and helping teams apply effective approaches to complex risk decisions.

Minimum Required Qualifications • Bachelor's Degree or Equivalent • 8 years of relevant professional experience . • Demonstrated experience assessing and managing complex technology, third-party, or enterprise risk matters. • Experience providing strategic risk advice and recommendations that support significant business or enterprise decisions. • Demonstrated ability to lead complex, cross-functional initiatives and influence outcomes across multiple stakeholder groups without direct authority. • Experience evaluating risk and control considerations and developing well-supported recommendations for management. • Ability to exercise independent judgment when evaluating complex or potentially material risk matters. • Strong communication and stakeholder-management capabilities, including the ability to translate complex risk considerations into clear, actionable recommendations. • Shows curiosity and adaptability in learning and responsibly applying new technologies, including artificial intelligence, to reimagine how we work.

Desired Experience • Significant experience in Third Party Risk Management, third-party technology risk; or a closely related risk discipline • Experience operating within a highly regulated or similarly complex business environment. • Experience advising senior leaders on complex risk matters and influencing decisions across organizational boundaries. • Experience leading enterprise-level risk initiatives involving multiple business, technology, cybersecurity, procurement, legal, operational resilience, or risk stakeholders. • Experience improving risk management governance, processes, data, analytics, automation, or operating practices. • Experience mentoring colleagues, sharing subject-matter expertise, and influencing risk management best practices.

#LI - TW1 - Hybrid

Qualifications Active Directory (AD), Active Directory (AD), Amazon Web Services (AWS), Artificial Intelligence (AI), Atlassian JIRA, Authentication Management, Backup and Recovery (Software), Business Insight Skills, Business Process Management Skills, Calendar and Scheduling Tools, Cleaning and Transforming Data, Cloud Technology, Collaborating Cross-Functionally, Communicating in Technical Writing, Communicating Technical Information, Communication, Configuration Management (CM), Conflict Resolution, Coordination, Customer and Market Insights, Customer Relationship Management (CRM), CyberArk, Cybersecurity Analysis, Data Analysis, Data Analysis Interpretation {+ 60 more} Education: Bachelor's Level Degree (Required) The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.

Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disa

Similar jobs

• Information Security Risk - Risk Management - Advisor — Fanniemae · Plano, TX
• Research Risk Management Vice President — Morgan Stanley · New York, New York, United States
• Technology Risk Management - Control Officer; VP — MUFG · New York, NY
• Manager, Technology Risk — Hinge Health · San Francisco-HQ
• Technical Program Manager, Risk — Stripe · Remote
• Principal, Technology Risk and Control — Northern Trust · Chicago, IL
• Risk Advisory Services Principal — Baker Tilly · Remote
• Risk Advisory Services Principal — Baker Tilly · USA CA San Francisco 50 Fremont St | USA CA Pasadena | USA CA Fresno