Defense and Response - Technology Management - Senior Director

Company Description

At Fannie Mae, futures are made. The inspiring work we do helps make a home a possibility for millions of homeowners and renters. Every day offers compelling opportunities to use tech to tackle housing’s biggest challenges and impact the future of the industry. You’ll be a part of an expert team thriving in an energizing, flexible environment. Here, you will grow your career and help create access to fair, affordable housing finance.

Job Description

We are seeking a highly skilled and experienced Senior Director of Cyber Engineering and Operations to lead and oversee our organization's cybersecurity initiatives. The ideal candidate will possess a strategic mindset along with a deep technical expertise in various domains of cybersecurity, including endpoint security, network security, data protection, cloud security posture management, web application firewalls, endpoint detection and response, CICD pipeline security, operational monitoring of technology, SaaS security, and email security.

In this compelling leadership position, you will plan and direct the work of staff who provide overall direction with technology products and processes; assess enterprise functional needs and implement technology solutions to support; define strategic outlook; coordinate operational activities of the unit through the efforts of subordinate staff managers; coordinate operational activities of the unit through the efforts of staff managers

THE IMPACT YOU WILL MAKE
The Defense and Response - Technology Management - Senior Director role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:

• Apply an understanding of strategic issues of importance to determine functional technology needs of enterprise across diverse and complex groups
• Direct the development, formulation, and implementation of new technology coordinating simultaneous implementation programs across divisions
• Identify appropriate resources to support cross-divisional projects and new strategic initiatives.
• Direct the establishment of best practices and guidelines for existing or new technologies.

Qualifications

THE EXPERIENCE YOU BRING TO THE TEAM

Minimum Required Experiences

• 8 years

- 10+ years of progressive experience in cybersecurity, with at least 5 years in a leadership role.

- Proven expertise in endpoint security, network security, data protection, cloud security, web application firewalls, and related technologies.

- Hands-on experience with endpoint detection and response tools and operational monitoring solutions.

- Strong understanding of CICD pipelines and integrating security practices within these pipelines.

- In-depth knowledge of SaaS security and email security best practices.

- Excellent leadership, communication, and strategic planning skills.

Desired Experiences

• Bachelor degree or equivalent; Master degree preferred

Responsibilities

- Develop and execute comprehensive cybersecurity strategies to safeguard the organization's systems, networks, and data assets.

- Lead a team responsible for designing, implementing, and maintaining robust endpoint security measures to protect against advanced threats.

- Implement and manage network security solutions to ensure a secure and resilient network infrastructure.

- Establish and maintain data protection protocols and encryption mechanisms to safeguard sensitive information.

- Oversee cloud security posture management to ensure the secure configuration and management of cloud environments.

- Manage and optimize web application firewalls to protect web-based services from cyber threats.

- Implement and oversee endpoint detection and response mechanisms to rapidly identify and mitigate security incidents.

- Collaborate with development and operations teams to embed security into the CICD pipeline.

- Lead operational monitoring efforts to proactively detect and respond to application events and incidents.

- Develop and enforce policies and procedures to enhance SaaS security across the organization.

- Ensure robust email security measures are in place to prevent phishing attacks and email-based threats.

Skills

The group of skills related to Risk Assessment and Management including evaluating and designing controls, conducting impact assessments, identifying control gaps, remediating risk, etc.
Working with people with different functional expertise respectfully and cooperatively to work toward a common goal
Skilled in creating visual concepts, creating content, and editing content by hand or with the help with computer software to communicate idea