IT Audit, Professional

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose.

At Freddie Mac, you will do important work to build a better housing finance system and you’ll be part of a team helping to make homeownership and rental housing more accessible and affordable across the nation.

Come join our outstanding Internal Audit team at Freddie Mac! Our Information Technology audit team is part of the Internal Audit Division and provides independent assurance over how Information, Technology and Operational risk is handled at Freddie Mac. If this sounds exciting to you, read on!

Our Impact:

Members on our team are highly skilled audit, risk management, and/or technology professionals with a proven track record of providing valuable audit and advisory services to Freddie Mac. The team plays a meaningful role in crafting our approach to leading Information, Technology and Operational risk by providing independent, objective, and value-added assurance of risk management, governance, and controls.

Your Impact:

The IT Audit Professional will focus on completing audit, advisory, and issue remediation validation services and is passionate about Information & Technology risk. This can cover multiple areas from reviewing Freddie Mac’s core business processes to working on audits about core Information Technology General Controls. As part of the Third Line of Defense the candidate will work closely with risk partners in the Second Line of Defense and practitioners in the First Line of Defense in both the lines of business and Information Technology.

Qualifications:

• 2-4 years of progressive experience auditing Information & Technology risks in a sophisticated, IT environment
• Bachelor’s degree in Management Information Systems or Business with an emphasis in Technology, Computer Science, Accounting, Information Systems or related field or equivalent experience
• Solid understanding of industry standards to include COBIT, NIST, ISO, or ITIL
• Platform, middleware, application, and cybersecurity audit experience including the various levels of the OSI model and technologies including Windows, Unix, and Oracle
• Basic knowledge of cloud-based tools, applications, and vendors such as AWS, Azure, or Google
• Detailed understanding and ability to communicate various change and project management methodologies (SDLC, Agile)
• Data, Privacy and Information security risk compliance experience with regulatory environments including GDPR or CCPA
• CISA, CPA, or CIA or willingness to acquire one within the first year of employment
• Additional certifications such as PMP, CRISC, CISM, CISSP desirable

Keys to Success in this Role:

• Must work well in collaborative environment as well as individually
• Must work creatively and analytically in a problem-solving environment
• Must demonstrate effective verbal and written communication and social skills

Current Freddie Mac employees please apply through the internal career site.

We consider all applicants for all positions without regard to gender, race, color, religion, national origin, age, marital status, veteran status, sexual orientation, gender identity/expression, physical and mental disability, pregnancy, ethnicity, genetic information or any other protected categories under applicable federal, state or local laws. We will ensure that individuals are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

A safe and secure environment is critical to Freddie Mac’s business. This includes employee commitment to our acceptable use policy, applying a vigilance-first approach to work, supporting regulatory mandates, and using best practices to protect Freddie Mac from potential threats and risk. Employe