Christopher Pinto Email & Phone Number

Mclean, Virginia, United States

• Oversee approximately 70 business processes that comprise the SF Portfolio & Servicing division, including Single-Family Data and SF Technology departments. • Build and manage relationships with 15 officers to help drive risk culture.• Influence the direction of the Freddie Mac risk policies and standards and maintain a library of division-specific operational risk procedures that comply with the enterprise risk appetite. • Assist with downgrade and closure of issues identified across the three lines of defense and by Freddie Mac’s regulator, the Federal Housing Finance Agency (FHFA).• Conduct deep dive operational assessments for risks including human capital, reporting (SOX), transactions & initiatives, information, technology, resiliency, third-party, models and compliance. • Partner closely with Information Security and Enterprise Operations & Technology divisions to combat cyber security risk in the division, including ongoing vulnerability management efforts. • Employ project management best practices to keep key milestones and deliverables on target.• Manage large team of eight employees, with strong emphasis on people first.

Mclean, Virginia, United States

• Partner with and support four Multifamily departments as a risk and control lead including Technology, Production, Underwriting, and Business Management. • Facilitate operational risk management activities including risk and control self-assessments (RCSAs) & reporting, issue management, risk events, SOX coordination, and audit support.• Manage the compliance obligations library which contains hundreds of laws, regulations, advisory bulletins, and decisions & directives that Freddie Mac is required to comply with.• Lead overall divisional self-testing program comprised of test of design (TOD), test of operating effectiveness (TOE), issue remediation testing, and Compliance testing.• Create and maintain departmental documentation and facilitate associated trainings.• Collaborate with Enterprise Risk Management and Internal Audit (2nd & 3rd lines of defense).

Mclean, Va

• Conduct meetings with business area and IT leadership for Integrated and Infrastructure audits• Drive risk-based auditing process independently through planning, fieldwork, and reporting phases leveraging industry guidance such as NIST, COBIT, COSO, and ITIL• Draft & vet potential issues using the internal framework including inherent and residual risk assessment, severity determination, and root cause analysis• Supervise senior, staff, and intern level employees and assist in adapting to company culture• Adapt to changing environments, employing problem solving skills and conflict resolution• Develop partnerships with clients to break down silos and advise on industry best practices• Participate in the talent acquisition process, reviewing candidates and performing interviews

Mclean, Va

• Conduct meetings with IT management including Security Analysts, Authorizing Officials, Information System Security Officers, and Chief Information Officers• Manage FISMA, FISCAM, SSAE16 and other risk and compliance audits from start to finish including maintenance of project plans and budget analysis• Assist mainstream cloud providers in undergoing the Federal Risk and Authorization Management Program (FedRAMP) process• Perform gap analyses of IT controls based on NIST guidance• Recognize, investigate and provide recommendations to management for identified issues• Train and supervise interns, associates, and contractors on client engagements• Develop relationships with clients and advise on information security best practices• Serve on Federal Advisory Thought-Leadership Council reporting directly to senior leadership

Potomac, Md

• Supervise fifteen field-based employees• Support modern delivery efforts of in-house developed software products• Provide technical support and install critical patches on company-issued equipment• Draft and submit proposals in response to RFP’s• Perform project management and budget analysis for contracted projects• Review materials prepared for clients to ensure accuracy and quality control• Research, propose, and implement technology-based solutions and automations• Design employee manual and external publications including website and marketing• Reduce expenses by managing and re-evaluating overhead costs

Washington D.C. Metro Area

• Develop new website for assigned division• Participate in end-to-end higher education grant funding process

Masters Degree, Technology Management, Information Security Concentration, 3.97 Gpa

Bachelors Degree, University Honors Citation, 3.55 Gpa

Activities and Societies: Alpha Phi Omega Co-Ed Service Fraternity

Study Abroad

Diverse Hiring Certified, Diversity, Equity & Inclusion (Or Dei)

The Consciously Unbiased Diverse Hiring Certification workshop designed for Hiring Managers and Talent Acquisition Teams educates on key.