F

Fannie Mae

Buys home loans from lenders and guarantees them

Vice President Cybersecurity

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-time

About the Job

Requirements

  • At least 10 years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, including the ability to lead large-scale programs, organizations, and strategic initiatives.
  • Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, or security architecture.
  • Experience developing and executing cybersecurity strategies aligned with business priorities in complex, highly regulated, and evolving environments.
  • Ability to lead organizational transformation, technology modernization, and operational improvement initiatives.
  • Experience building partnerships and influencing stakeholders across business, technology, risk, audit, and executive leadership functions.
  • Strategic thinking, problem-solving, and analytical capabilities, including evaluating complex issues, assessing risk, and driving business and technology solutions.
  • Written, verbal, and executive communication skills, including translating cybersecurity concepts into clear business outcomes and recommendations for senior leaders and executive audiences.
  • Ability to lead, develop, and inspire high-performing teams while fostering collaboration, accountability, innovation, and continuous improvement.
  • Experience managing multiple priorities and delivering results in a fast-paced, dynamic environment.
  • Success communicating cybersecurity strategy, risk, and program performance to executive leadership, boards, regulators, and other stakeholders.

Responsibilities

  • Lead and develop cybersecurity teams responsible for the strategy, design, implementation, operation, and continuous improvement of enterprise cybersecurity capabilities.
  • Establish and execute enterprise cybersecurity strategies, roadmaps, and programs aligned with organizational priorities, business objectives, and evolving threat landscapes.
  • Provide cross-functional leadership across cybersecurity disciplines, including security engineering, cyber risk management, governance, security architecture, data protection, cloud security, and vulnerability management.
  • Provide executive leadership for emerging cyber risks, including risks associated with artificial intelligence, automation, and advanced digital technologies, and ensure the security posture evolves to address changing threats and business opportunities.
  • Partner with technology and business leaders to integrate security into enterprise initiatives, digital transformation efforts, and emerging technology strategies.
  • Oversee development, implementation, and maturity of cybersecurity capabilities that protect enterprise infrastructure, applications, data, users, and cloud environments.
  • Ensure effective cyber threat monitoring, intelligence, detection, incident response, crisis management, and recovery capabilities across the organization.
  • Drive cyber resilience and operational readiness through proactive risk management, security assessments, testing, and continuous improvement programs.
  • Lead development and execution of cybersecurity governance frameworks, standards, policies, and operating models supporting regulatory, compliance, and business requirements.
  • Provide executive oversight of cybersecurity risk management activities, audits, assessments, and remediation efforts, ensuring timely resolution of identified issues.
  • Partner with enterprise risk, compliance, legal, and audit functions to maintain alignment on cybersecurity priorities, controls, and regulatory obligations.
  • Oversee cybersecurity metrics, reporting, analytics, and data-driven decision-making capabilities for monitoring security performance and risk.
  • Promote innovative technologies, automation, and modern security practices to improve operational effectiveness, scalability, and efficiency.
  • Provide strategic guidance on security architecture and technology decisions to ensure secure, resilient, and sustainable enterprise solutions.
  • Build and maintain relationships with internal and external stakeholders, including executive leadership, regulators, industry partners, and third-party service providers.
  • Drive talent development, succession planning, workforce strategy, and organizational effectiveness across the cybersecurity organization.
  • Communicate cybersecurity strategies, priorities, risks, and performance to executive leadership and key stakeholders in clear business terms.

About the Company

Fannie Mae

Buys home loans from lenders and guarantees them

Fannie Mae buys single-family and multifamily mortgages from banks, credit unions and other lenders across the United States, giving those lenders cash to make more home loans. It does not lend to homebuyers directly; instead it pools most of the loans it buys into mortgage-backed securities and guarantees investors timely payment of principal and interest. Lenders deliver loans that meet its underwriting standards, often checked through its Desktop Underwriter system. The company earns guaranty fees on the securities it backs and interest income on loans held in its portfolio. Congress chartered it in 1938, it has operated under federal conservatorship since 2008, and it is headquartered in Washington, D.C.

Company size
5,001-10,000
Company stage
IPO
Headquarters
Washington, DC
Founded
1938

Recently Posted Jobs

Explore more opportunities at Fannie Mae

See more jobs