Asks for

The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”
The ad says“Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.”

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

THE IMPACT YOU WILL MAKE

The Vice President, Cybersecurity is a senior cybersecurity executive responsible for helping define and execute Fannie Mae's enterprise cybersecurity strategy. This leader will oversee a broad portfolio of cybersecurity capabilities and programs designed to protect the organization's information assets, technology platforms, business operations, customers, and reputation.

The VP will provide strategic leadership across cybersecurity domains, which may include security architecture, engineering, operations, cyber risk management, governance, data protection, cloud security, vulnerability management, and emerging security technologies. The role is responsible for ensuring cybersecurity capabilities remain effective, scalable, resilient, and aligned with business objectives in a complex on-premises, cloud, and hybrid technology environment.

This executive will partner closely with business, technology, and risk leaders to strengthen the organization's security posture, drive modernization initiatives, enhance cyber resilience, and ensure compliance with applicable regulatory and industry requirements.

The VP will foster a culture of security, operational excellence, innovation, and continuous improvement while leveraging data, automation, and emerging technologies to improve cybersecurity outcomes across the enterprise.

Lead and develop high-performing cybersecurity teams responsible for the strategy, design, implementation, operation, and continuous improvement of enterprise cybersecurity capabilities.
Establish and execute enterprise cybersecurity strategies, roadmaps, and programs that align with organizational priorities, business objectives, and evolving threat landscapes.
Provide cross-functional leadership across multiple cybersecurity disciplines, which may include security engineering, cyber risk management, governance, security architecture, data protection, cloud security and vulnerability management.
Provide executive leadership for emerging cyber risks, including those associated with AI, automation, and advanced digital technologies, ensuring the organization's security posture evolves to address changing threats and business opportunities.
Partner with technology and business leaders to integrate security into enterprise initiatives, digital transformation efforts, and emerging technology strategies.
Oversee the development, implementation, and maturity of cybersecurity capabilities that protect enterprise infrastructure, applications, data, users, and cloud environments.
Ensure effective cyber threat monitoring, intelligence, detection, incident response, crisis management, and recovery capabilities across the organization.
Drive cyber resilience and operational readiness through proactive risk management, security assessments, testing, and continuous improvement programs.
Lead the development and execution of cybersecurity governance frameworks, standards, policies, and operating models that support regulatory, compliance, and business requirements.
Provide executive oversight of cybersecurity risk management activities, audits, assessments, and remediation efforts, ensuring timely resolution of identified issues.
Partner with enterprise risk, compliance, legal, and audit functions to maintain alignment on cybersecurity priorities, controls, and regulatory obligations.
Oversee cybersecurity metrics, reporting, analytics, and data-driven decision-making capabilities that enable effective monitoring of security performance and risk.
Promote the adoption of innovative technologies, automation, and modern security practices to improve operational effectiveness, scalability, and efficiency.
Provide strategic guidance on security architecture and technology decisions to ensure secure, resilient, and sustainable solutions across the enterprise.
Build and maintain strong relationships with internal and external stakeholders, including executive leadership, regulators, industry partners, and third-party service providers.
Drive talent development, succession planning, workforce strategy, and organizational effectiveness across the cybersecurity organization.
Communicate cybersecurity strategies, priorities, risks, and performance to executive leadership and key stakeholders in clear business terms.

THE EXPERIENCE YOU BRING TO THE TEAM

10+ years of progressive leadership experience in cybersecurity, information security, technology risk, or related technology disciplines, with a demonstrated ability to lead large-scale programs, organizations, and strategic initiatives.
Broad knowledge of cybersecurity principles, practices, and frameworks across one or more domains, including security operations, security engineering, threat management, cyber risk, governance, vulnerability management, identity and access management, cloud security, data protection, security architecture, or related disciplines.
Proven experience developing and executing cybersecurity strategies that align security objectives with business priorities in complex, highly regulated, and evolving environments.
Demonstrated ability to lead organizational transformation, technology modernization, and operational improvement initiatives.
Experience building strong partnerships and influencing stakeholders across business, technology, risk, audit, and executive leadership functions.
Strong strategic thinking, problem-solving, and analytical capabilities, with the ability to evaluate complex issues, assess risk, and drive effective business and technology solutions.
Excellent written, verbal, and executive communication skills, including the ability to translate complex cybersecurity concepts into clear business outcomes and recommendations for senior leaders and executive audiences.
Proven ability to lead, develop, and inspire high-performing teams while fostering a culture of collaboration, accountability, innovation, and continuous improvement.
Experience managing multiple priorities and delivering results in a fast-paced, dynamic environment.
Demonstrated success communicating cybersecurity strategy, risk, and program performance to executive leadership, boards, regulators, and other key stakeholders.

Target Pay Range: $250,000.00 - $350,000.00

Qualifications

Education:

The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.

Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.

The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.