Responsibilities
- Strategic Leadership
- Define and drive the enterprise identity management strategy in alignment with cybersecurity, compliance, and business objectives.
- Serve as a key advisor to the CSO and senior leadership on identity-related risks, controls, and innovations.
- Identity Lifecycle Management
- Lead the design and execution of identity lifecycle processes including onboarding, role assignment, transfers, and offboarding.
- Ensure integration with HR, IT, and business systems to maintain accurate and timely identity data.
- Champion automation and policy-based controls to enhance efficiency and reduce risk.
- Segregation of Duties (SoD) Enforcement
- Develop and maintain SoD frameworks to prevent toxic access combinations and mitigate insider threats.
- Collaborate with audit, risk, and compliance teams to ensure alignment with regulatory and internal control requirements.
- Embed SoD enforcement into access request and certification workflows.
- Access Provisioning & JIT Access
- Oversee enterprise-wide access provisioning strategies, including role-based and attribute-based access controls.
- Implement and expand Just-In-Time (JIT) and policy-based access models to minimize standing privileges and reduce exposure.
- Ensure provisioning processes are secure, auditable, and responsive to business needs.
- Identity Operations & Governance
- Lead daily operations of identity services including provisioning, de-provisioning, access reviews, and incident resolution.
- Establish and monitor SLAs, KPIs, and operational metrics to ensure service quality and continuous improvement.
- Develop governance frameworks for identity data quality, policy compliance, and audit readiness.
- Manage vendor relationships and ensure optimal use of IAM platforms and tools.
Requirements
- Bachelor’s degree or equivalent
- 8+ years of progressive experience in IAM or cybersecurity, with 5+ years in a senior leadership role.
- Proven expertise in identity lifecycle management, SoD enforcement, access provisioning, JIT access, and identity governance.
- Experience with IAM platforms such as SailPoint, Saviynt, Okta, CyberArk, or Azure AD.
- Strong understanding of regulatory requirements (e.g., SOX, GLBA, FFIEC) and audit frameworks.
Benefits
- Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being.
Work Arrangement
On-site
Additional Information
- Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.
- Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor.
- Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company.
