IT Internal Auditor - Senior Associate

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

Our team of trusted audit professionals evaluates every aspect of Fannie Mae's IT environment. From on-premises environments to cutting edge cloud services, our audits cover the broad range of exciting technologies Fannie Mae uses, providing a challenging environment with tremendous opportunities for personal growth.

As a valued colleague on our Integrated Technology Audit team, you will be responsible for supporting our integrated audit portfolio consisting of business-led audits of Fannie Mae's lines of service in areas such as Single Family, Multifamily, Capital Markets, Human Resources, and Enterprise Risk Management. You will conduct design reviews and perform operating effectiveness testing of IT general controls supporting the business processes. These can also include special projects such as pre-implementation reviews of key enterprise programs.

THE IMPACT YOU WILL MAKE

The IT Internal Auditor - Senior Associate role will offer you the flexibility to make each day your own while working alongside people who care, to help to improve the governance, risk, and control environment of Fannie Mae's IT infrastructure. You will have the opportunity to influence change within Internal Audit and across the organization. Key responsibilities include:

• Apply specialized technical knowledge and expertise to execute IT general control audits of complex technology infrastructure environments both in the cloud and on-premises.
• Assist with identifying risks and assessing the potential impact of risks on the organization; follow a risk-based approach to execute audit plans as appropriate and suggest areas requiring additional analysis.
• Provide day-to-day project management for assigned areas; meet established deadlines and prepare high-quality work papers and other documentation; leverage manager guidance as needed; and address work paper review comments in a timely manner.
• Conduct testing with autonomy and a keen focus on the highest risk areas.
• Perform data analyses and creating visualizations.
• Plan and actively participate in client meetings, such as walkthroughs and weekly status updates.
• Assist the team in creating regular points of view by compiling and analyzing relevant data.

• 2 years of experience in IT Audit, IT Risk Management, or Information Security.
• Understanding of IT related risk management practices, industry frameworks, and regulatory requirements.
• Demonstrated ability to understand IT risk within the context of broader business objectives and effectively communicate technical risk concepts in terms that resonate with business stakeholders.
• Excellent written and verbal communication skills.
• Critical thinking and data analytic skills.

• Bachelor's degree or equivalent. Bachelor's degree in Information Systems, Information Technology, Management Information Systems , or related areas of study preferred.
• 4+ years of experience in IT Audit, IT Risk Management, or Information Security.
• One or more of the following certifications: CISA, CISSP, CEH, CRISC, CISM.
• Strong understanding of cloud technologies, such as Amazon Web Services.
• Ability to perform data analyses and create visualizations using tools such as Power BI, Tableau, or Python.