[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Fannie Mae jobs](https://jobs.opennash.com/companies/fannie-mae/) · [Search jobs](/search/) Fannie Mae · Reston, Virginia # Senior Director, Cybersecurity and AI Risk Oversight Reston, Virginia Director Security Listed on Fannie Mae’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Fannie Mae’s careers site →](https://fanniemae.wd1.myworkdayjobs.com/FannieMaeCareers/job/Reston-VA/Enterprise-Technology-Risk---Risk-Management---Senior-Director_JR2955) [OpenNash Jobs](https://jobs.opennash.com/) / [Fannie Mae](https://jobs.opennash.com/companies/fannie-mae/) / Senior Director, Cybersecurity and AI Risk Oversight ## Job description The Senior Director, Cybersecurity Risk Oversight Lead is responsible for advancing the Chief Risk and Compliance Division's (CRCD) independent cybersecurity risk oversight strategy. This role serves as a senior second line of defense (2LOD) leader responsible for overseeing cybersecurity risk governance, risk identification and assessment, risk appetite, issue management, emerging risk monitoring, regulatory engagement, and executive reporting. Serving as a strategic partner to enterprise leadership, technology teams, and control functions, this role provides independent oversight and credible challenge to ensure cybersecurity risks are effectively identified, measured, monitored, managed, and reported. The position provides transparency into the firm's cybersecurity risk posture, control effectiveness, remediation progress, and emerging threats while supporting informed decision-making by executive management, risk committees, and regulators. The role also oversees cybersecurity risks associated with emerging technologies, including artificial intelligence, frontier models, agentic systems, and quantum computing, ensuring risks are appropriately governed and aligned with enterprise risk appetite. THE IMPACT YOU WILL MAKE Cybersecurity Risk Oversight & Governance Lead independent oversight and credible challenge of the enterprise cybersecurity risk management program. Assess the effectiveness of cybersecurity governance, risk management practices, and control environments. Provide independent review and challenge of cybersecurity strategies, risk assessments, exceptions, risk acceptances, and remediation plans. Evaluate cybersecurity risk exposures against approved risk appetite statements, limits, and thresholds. Identify material risk concentrations, systemic control weaknesses, and emerging risk trends. Promote accountability, transparency, and effective risk management across the enterprise. Cyber Risk Assessment, Monitoring & Reporting Oversee the assessment, aggregation, monitoring, and reporting of cybersecurity risks across the enterprise. Establish and maintain cybersecurity risk metrics, key risk indicators (KRIs), and risk appetite measures. Monitor cybersecurity events, control deficiencies, audit findings, and issue remediation activities. Develop executive-level dashboards, scorecards, and risk reporting for senior leadership, risk committees, and the Board. Translate complex cybersecurity risks into clear business impacts and actionable recommendations. Emerging Technology & Cybersecurity Risk Oversight Provide independent oversight of cybersecurity risks associated with artificial intelligence, frontier models, autonomous agents, and other emerging technologies. Assess risks related to AI-enabled cyber threats, adversarial attacks, model compromise, data exposure, and AI supply-chain vulnerabilities. Evaluate cybersecurity implications of advanced AI capabilities and emerging technology adoption across the enterprise. Lead oversight of enterprise preparedness for quantum computing threats and post-quantum cryptography transition efforts. Monitor emerging cyber threats, technology developments, and regulatory expectations to identify risks that may impact the firm's security posture. Issue Management, Regulatory Engagement & Assurance Provide oversight of cybersecurity issues, corrective action plans, risk acceptances, and remediation activities. Review and challenge issue severity, root cause analysis, remediation effectiveness, and closure decisions. Support cybersecurity regulatory examinations, findings remediation, and supervisory commitments. Partner with Internal Audit, Compliance, and other assurance functions to assess cybersecurity risk management effectiveness. Escalate material cybersecurity risks, control concerns, and adverse trends through established governance channels. Executive Leadership & Stakeholder Management Serve as a trusted cybersecurity risk advisor to executive leadership and governance committees. Build strong partnerships across technology, business, risk, audit, compliance, and regulatory stakeholders. Develop board level presentations and present cybersecurity risk perspectives and recommendations to senior leadership and Executive-level forums. Lead and develop a high-performing team of cybersecurity risk professionals. Foster a culture of accountability, transparency, continuous improvement, and sound risk management. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Oct 11, 2026 - Last checked: Oct 18, 2026 - Listed for: 7 days - Location: Reston, Virginia[Apply on Fannie Mae’s careers site →](https://fanniemae.wd1.myworkdayjobs.com/FannieMaeCareers/job/Reston-VA/Enterprise-Technology-Risk---Risk-Management---Senior-Director_JR2955) ## More jobs at Fannie Mae ### [Campus - Technology Program Intern](https://jobs.opennash.com/companies/fannie-mae/jobs/7f79be38705f45e206b2/) Reston, Virginia ### [Cloud Engineer (Advisor)](https://jobs.opennash.com/companies/fannie-mae/jobs/782823c800755a718203/) Reston, Virginia ### [Digital Marketing Director - Marketing Automation and Channel Operations](https://jobs.opennash.com/companies/fannie-mae/jobs/4219305489b32353ff22/) Reston, Virginia ### [Director, Enterprise Architecture](https://jobs.opennash.com/companies/fannie-mae/jobs/03c1fba9aae43aa7392a/) Reston, Virginia ### [Enterprise Operational Risk - Risk Management - Lead Associate](https://jobs.opennash.com/companies/fannie-mae/jobs/5fa164192ce1f97ff993/) Reston, Virginia ## Similar jobs at other companies ### [Sr. Analyst, Cybersecurity, Third Party Risk Management (TPRM)](https://jobs.opennash.com/companies/carmax/jobs/2962fe5a5723d6d4c457/) CarMax · Richmond, VA, United States ### [Director, Data Risk Oversight](https://jobs.opennash.com/companies/blackrock/jobs/eb395ec300fb4f956f7d/) BlackRock · New York, NY ### [Risk and Cybersecurity, FIS University Program](https://jobs.opennash.com/companies/fidelity-national-information-fis/jobs/ae8e8871c162b4755318/) Fidelity National Information (FIS) · Jacksonville, FL, United States of America ### [Intern, Risk and Cybersecurity, FIS University Program](https://jobs.opennash.com/companies/fidelity-national-information-fis/jobs/c7655c058f81349413a0/) Fidelity National Information (FIS) · Jacksonville, FL, United States of America ### [Insurance Risk Oversight, Executive Director](https://jobs.opennash.com/companies/jpmorganchase/jobs/c4cf3c5daf54ddb0aca4/) JPMorganChase · Columbus, OH, United States OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)