Fannie Mae provides reliable, large-scale access to affordable mortgage credit in communities across our nation. We are the leading source of funding for housing in America, which means more people can buy or rent a home. We are focused on sustaining the housing recovery, improving our company, and leading change to make housing better.
Join our diverse, high-performing team and make a difference as we work together to enable access to a good home.
The Insider Risk Analyst will use a variety of techniques and tools to analyze potential indicators and investigate events for potentially harmful activity within Fannie Mae's network and systems. Design and administer procedures in the organization that sustain the security of the organization's data and access to its technology and communications systems. Assess risk of exposure of proprietary data through weaknesses in platforms, access procedures, and forms of access to the organization's systems and the data contained in them. Track security violations and identify trends or exposures that could be addressed by additional training, technical measures, or use of application tools to enhance security.
KEY JOB FUNCTIONS
Utilize security technologies and tools, identify and investigate activity in collaboration with managers, HR and IR to determine severity and intent, interview the employee or contractor if necessary, and use defined processes for response and recovery activities when necessary.
Utilize standard investigation techniques to gather and analyze information, and work with appropriate teams to prove or disprove allegations or suspicions with data and facts.
Design, plan and implement test strategies to support the core infrastructure in the contingency environment for all critical business applications to ensure business continuity in the event of a major business interruption or disaster.
Lead projects as related to technology refresh/evaluation such as Load Balancing and SSL technology. Research corrective measures (long term solutions) needed for any chronic issues identified that compromise security of particular systems or platforms.
Participate in developing and testing of new methodologies and systems for recovery of the critical core business processes and the enterprise infrastructure.
Serve as technical lead or project lead in projects involving testing defenses against insider risk, hacking, Denial of service, spam, break-ins, or related attacks. Provide technical guidance to less senior staff or applications developers/systems administrators.
Education Level Required (if any)
Bachelor Degree or Equivalent
Area of Study Preferred(if any)
Computer Science or IT/IS
6-8 years of related experience
SPECIALIZED KNOWLEDGE & SKILLS
The Insider Risk Program helps protect Fannie Mae's confidential and sensitive information from anyone with authorized access who might attempt to sabotage systems or products, steal company information, or violate security controls.
Engages with managers, HR, IR, Privacy & Compliance, and other partners to investigate employee and contractor actions that could pose a threat to Fannie Mae's networks, systems, and/or data.
Must be proficient with SIEM technologies, data manipulation, have demonstrated written and oral communication skills and be able to effectively communicate findings, outcomes and necessary actions to a variety of audiences as well as the ability to understand & apply technical concepts.
Must be comfortable speaking to and questioning suspected individuals; along with their managers/directors, and other involved partners during the investigation.
Must be passionate about the team's mission, remain calm under pressure, be able to keep an open mind, set aside personal biases/feelings, and pivot quickly between activities based on changing priorities.
Experience with investigations and response including subject/witness interviews
Risk management focus - the ability to make risk-based decisions and recommendations
Ability to learn new systems and high attention to detail
Independent-thinker who works well with team members and with stakeholders to ensure program success
Demonstrated ability to identify patterns in data and translate those patterns into indicators
Understanding of insider threats
Understanding of basic security concepts. This will help to identify potential gaps in which an insider could steal data or use to sabotage/misuse systems
Experience with security technologies
As a condition of employment with Fannie Mae, any successful job applicant will be required to successfully complete a background investigation.
Fannie Mae is an Equal Opportunity Employer.
Fannie Mae Corp