• Reporting to the VP of Risk Management, implements multi-year first-line risk management framework.• Develops programs, processes, tools, and metrics to create risk management focused culture.• Performs top-down risk assessment and provides input on emerging operational risks, issues and key business decisions• Engages with functional groups across first and second-line to identify areas of concentrated risk and performs deep-dive investigations into inherent risks and mitigating controls and assists with development of remediation plans.• Manages various issue remediation activities by assessing inherent risk, mitigating controls, and residual risk and recommends solutions as required to meet policy, regulatory, audit and industry best practices.

• Reporting to the VP of Technology Audit, managed portfolio of audit projects and activities to accomplish the technology annual audit plan. Developed a risk-based technology annual audit plan. Areas of focus included IT infrastructure & operations, third-party risk management, robotic process automation, cloud governance and implementations, cybersecurity and business resiliency. Implemented audit approach and frameworks for assessing risk in these technology areas that were utilized across the audit team.• Managed group of IT auditors and external consultants. Provided direct oversight, included, mentoring, coaching and development to direct reports and staff across the technology audit team. • Cultivated relationships with various stakeholders by providing meaningful feedback and process improvements during audit engagements. • Enhanced the process of conducting business integrated audits by developing a more transparent and efficient engagement model, which yielded improved results and enhanced collaboration amongst the audit teams.• Managed the consolidated technology related audit issues portfolio. Effectively tracked, monitored, and reported issue status on a monthly basis. Provided regular status updates to first-line senior management teams and was actively engaged with numerous issue remediation activities..

• Managed and executed audit projects including areas of data center operations, third-party risk management, business continuity, IT governance, cloud computing, IT infrastructure, network, problem and incident management, robotic process automation, procurement and cybersecurity. • Drafted and communicated audit reports and findings to stakeholders. • Provided subject-matter expertise for approaching third-party risks related to governance and oversight, due diligence, on-going monitoring and on-site assessments.• Executed on various annual planning activities, including providing input to the development of the IT Audit plan and documenting detailed risk assessments.• Provided mentoring, training and coaching to the technology audit staff. • Led audit issue follow-up activities pertaining to numerous enterprise-wide issues and FHFA Matters Requiring Attention (MRA).

• Managed access management operations for a team of 10 FTE’s and contractors, which included assigning workload, monitoring request queue and incident tickets, identifying and remediating process gaps and enhancing internal processes.• Provided coaching, development and performance feedback to direct reports. • Performed planning, forecasting and reporting on the operational activities such as service-level performance and operational incidents.• Developed and delivered training for administering system access on various applications, databases and operating systems.

• Responsible for granting, modifying and removing application, direct entitlement and internal security table access to various applications, databases and platforms for internal customers.• Provided 24/7/365 support to internal customers for access issues and requests impacting business operations.• Performed user acceptance and regression testing for application releases (IAG, Services Online, Lotus Notes etc.).

• Managed team of contractors for hardware deployments and disposal of surplus hardware and peripherals (PC, monitor, laptop, mouse, etc.) • Developed and maintained hardware asset management database in MS Access.• Performed hardware and software installations and technical troubleshooting on laptops, desktops, monitors and printers.• Managed the disposal of fully depreciated hardware and peripheral assets, which included coordinating with salvage vendors and local non-profits.• Generated hardware asset inventory and donation reports to management and the Financial Planning & Analysis team on a regular basis.