Senior Director – Head of Cyber Security Risk

Fannie Mae

Senior Director, Cybersecurity Risk overseeing enterprise cyber risk strategies and governance for Fannie Mae. Shaping cyber risk outcomes while collaborating with senior leadership and regulatory stakeholders.

Posted 4/16/2026full-timePlano • District of Columbia, Texas, Virginia • 🇺🇸 United StatesSenior💰 $200,000 - $269,000 per yearWebsite

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Develop and execute the enterprise cybersecurity risk management strategy, including supporting policies, processes, and initiatives aligned to firm standards, regulatory requirements, and industry best practices.
Lead enterprise cyber risk identification, assessment, prioritization, and mitigation, including ownership of the annual top cyber risk assessment and ongoing maturity of risk methodologies.
Oversee cybersecurity risk governance, reporting, issue management, and control effectiveness, providing clear insights to senior leaders and governance forums.
Define and standardize governance reporting standards, templates, cadence, and content expectations to ensure consistency, clarity, and comparability of cyber risk reporting.
Establish and maintain strong relationships with internal and external stakeholders, including cross‑functional leaders, regulators, and auditors.

Requirements

What you’ll need

15+ years of experience in cybersecurity, technology risk, or related risk disciplines.
Bachelor's degree or equivalent professional experience.
Demonstrated experience engaging senior executives and regulatory stakeholders.
Preferred Qualifications: Master’s degree. Professional certifications such as CISSP, CISA, or CRISC.

Benefits

Comp & perks

Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurity risk managementrisk identificationrisk assessmentrisk prioritizationrisk mitigationgovernance reportingcontrol effectivenessrisk methodologiescyber risk reporting

Soft Skills

leadershipcommunicationstakeholder engagementrelationship managementissue management

Certifications

CISSPCISACRISC