Cyber Security Technical Manager

Company Description

At Fannie Mae, futures are made. The inspiring work we do helps make a home a possibility for millions of homeowners and renters. Every day offers compelling opportunities to use tech to tackle housing’s biggest challenges and impact the future of the industry. You’ll be a part of an expert team thriving in an energizing, flexible environment. Here, you will grow your career and help create access to fair, affordable housing finance.

Job Description

Minimum Required Experiences

• 6 years

Desired Experiences

• Bachelor degree or equivalent

THE IMPACT YOU WILL MAKE
The Information Security - Technology Management - Manager role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:
As a valued leader on our team, you will manage the work of a team who provide overall direction with technology products and processes; assessing enterprise functional needs and implementing technology solutions to support; defining strategic outlook; planning, directing, or coordinating operational activities of the unit with the help of subordinate executives and staff managers

Qualifications

THE EXPERIENCE YOU BRING TO THE TEAM

• Serve as lead to define and maintain the security configuration management processes, technologies, standards and guidelines at Fannie Mae
• Provide technical subject matter expertise to the cross functional development and technical service teams on security configuration management guardrails and best practices in the cloud and on prem
• Develop and implement on-prem and cloud-based strategic technology plan and oversee the day to day operations of a team of Security Configuration Management experts who support Fannie Mae’s technology
• Responsible for automation of preventative and detective controls for the management of security configurations in a hybrid cloud/on prem environment
• Responsible for the functionality, quality, value and timely delivery of products and services within our security configuration management organization.
• Plan or lead projects designed to define security configuration baselines, develop and test new methodologies and systems for automation and monitoring of security configuration baselines.
• Work with internal and external auditors to verify controls and address gaps accordingly.
• Plan, manage, document, and evaluate the performance of subordinate staff. Ensure their technical and professional growth through assignments, mentoring, and technical training opportunities

Skills

• Expertise and experience in defining security configuration baselines and enabling continuous security configuration monitoring for cloud, on prem and SaaS assets
• Expertise in cloud automation tools and engineering security services to design and deploy secure Infrastructure-as-Code environments via DevSecOps
• Expertise in Cloud Security Posture Management and experience in SaaS Security Posture Management
• Highly skilled in triage and remediation of complex technical security configuration gaps across cloud and on prem environments
• Working with highly technical architects and leaders with different functional expertise respectfully and cooperatively to work toward a common goal
• The group of skills related to Relationship Management including managing and engaging stakeholders, customers, and vendors, building relationship networks, contracting, etc.
• The group of skills related to Risk Assessment and Management including evaluating and designing technical security configurations, conducting impact assessments, identifying control gaps, assessing security risk, remediating risk, etc.
• The group of skills related to Product Development including designing products, developing product roadmaps, translating design requirements, prototyping, etc.
• Skilled in documentation and reporting for the purposes of analysis, data discovery, and decision-making with the use of relevant software in Security Configuration Management
• Skilled in presenting information and/or ideas to an audience in a way that is engaging and easy to understand
• Adept at managing project plans, resources, and people to ensure successful project completion
• Experience in the process of analyzing data to identify trends or relationships to inform conclusions about the data
• Skilled in supporting, controlling, monitoring, and management of large, complex, and sometimes geographically-dispersed IT infrastructure and applications in order to optimize IT service delivery
• Experience identifying measures, or indicators of system performance, and the actions needed to improve or correct performance to achiev