Examiner/Senior Examiner (IT/Cybersecurity)
What you'd do
This position is for an Examiner/Senior Examiner (IT/Cybersecurity) located in the Division of Enterprise Regulation (DER) at the Federal Housing Finance Agency (FHFA). In this role, the incumbent will be responsible for assessing the Regulated Entities' IT operations and cyber risk management practices, including the rapidly evolving frontier areas of artificial intelligence, quantum computing, and cybersecurity.
Major duties
Division of Enterprise Regulation The Division of Enterprise Regulation (DER) is responsible for the supervision of the Enterprises - Fannie Mae, Freddie Mac, and U.S. Financial Technology, LLC (the Regulated Entities). Fannie Mae, Freddie Mac and US FinTech are critical components of the nation's housing finance system and rely heavily on information technology (IT) systems and data to run their businesses. FHFA's Division of Enterprise Regulation (DER) is responsible for overseeing the Regulated Entities and ensuring their safe and sound condition and operations. DER is seeking dynamic IT Examiners/Senior Examiners to join our team! Position Overview The Examiner/Senior Examiner (IT/Cybersecurity) is assigned to a technology risk branch within the Division. In this capacity, the incumbent is responsible for planning, organizing, and completing examinations of the GSEs across a range of information technology disciplines. This will include assessing IT strategies and operations, information security and cybersecurity processes, artificial intelligence, data management practices, and business resiliency planning to ensure these align with regulatory guidance and industry standards. This is an opportunity to apply your IT and cybersecurity acumen to high-stakes, mission-driven work that protects the security and resilience of institutions vital to the nation's housing finance system. Major Duties & Responsibilities The Examiner/Senior Examiner (IT/Cybersecurity) duties listed below are at the EL-14 grade level. Depending on the grade level selected, the incumbent will perform the following duties with varying levels of supervision and difficulty: Lead or play a key role in the development of examination strategies and work plans; determine the scope of examination activities; and devise new or modify current work methods and procedures, as needed. Ensure that the development of examination scope and reports are fully completed according to prescribed FHFA regulatory and supervisory policy and program guidelines and standards. Develop sources of material appropriate for the evaluation of new or unique types of activities or operations. Perform thorough research to identify material suitable for unprecedented issues. Communicate examination findings and their bases to senior management to elicit management's views. Facilitate the flow of information and ensure a fully accurate understanding of the key risks, processes. and controls, and the factual basis for findings during the course of an examination. Document examination findings thoroughly through a combination of GSE source documents, report comments, and other examination workpapers that address both management practices and conditions. Maintain ongoing awareness/knowledge of significant issues or events and emerging risks that may impact the continued safe and sound operations of the GSEs. Provide program expertise concerning industry problems and the adequacy of current examination techniques in dealing with them. Analyze highly complex and/or extremely contentious banking, financial, housing, operational, and mortgage-market developments affecting the entities. Provide detailed and exhaustive written analysis along with innovative, yet effective recommendations encompassing the full range of supervisory issues requiring FHFA approval or attention. Maintain an authoritative knowledge of issues, trends, and advances in risk management and risk-based examinations of large, complex financial institutions. Provide FHFA management with expert advice on advances in examination management of practices and risk-based examination procedures. Conceive and implement new approaches for the enhancement of the examination program. Perform other duties as assigned.
What you need to qualify
You may qualify for your desired series and grade level if you meet the following qualification requirements: MINIMUM QUALIFICATIONS: Minimum Qualification EL-12: Applicants must have 52 weeks (one-year) of specialized experience equivalent to the next lower grade level as described below. Experience: I qualify for the EL/GS-12 because I have at least 52 weeks of specialized experience at the EL/GS-11 or equivalent demonstrating work experience with the statements described below. Examples of specialized experience include: Participating in analyses, audits, or other reviews of financial institutions related to information technology (IT) cybersecurity risk and related governance factors. Supporting the review and assessment of IT and cybersecurity compliance policies and risk management approaches. Contributing to written reports including evaluative commentaries appropriate to IT and cybersecurity risks and internal controls. Minimum Qualification EL-13: Applicants must have 52 weeks (one-year) of specialized experience equivalent to the next lower grade level as described below. Experience: I qualify for the EL/GS-13 because I have at least 52 weeks of specialized experience at the EL/GS-12 or equivalent demonstrating work experience with the statements described below. Examples of specialized experience include: Conducting analyses, examinations, or audits to evaluate the effectiveness of technology/cybersecurity risk controls and related practices in light of applicable laws, rules, regulations, regulatory guidance, or industry standards. Preparing written examinations or analysis of audits or other risk assessments and presenting the reports to management officials. Assessing technology/cybersecurity risk analysis and compliance issues in a regulated environment and providing recommendations for enhancements related to these issues. Assessing and validating risk management or techniques used in risk assessments or other critical areas working within regulated industries or organizations. Minimum Qualification EL-14: Applicants must have 52 weeks (one-year) of specialized experience equivalent to the next lower grade level as described below. Experience: I qualify for the EL/GS-14 because I have at least 52 weeks of specialized experience at the EL/GS-13 or equivalent demonstrating work experience with the statements described below. Examples of specialized experience include: Leading complex analyses, examinations, or audits to evaluate the effectiveness of technology/cybersecurity risk controls or related practices in light of applicable laws, rules, regulations, regulatory guidance, or industry standards. Preparing written examinations/audit reports or analysis and presenting the reports to senior officials within the audited organization or with the regulator/auditor. Performing analysis of cybersecurity and IT risk activities in a regulated industry or environment to identify potential risks or compliance issues, presenting findings, and developing recommendations related to technology/cybersecurity risk management and compliance. Working with regulatory requirements and guidelines related to technology/cybersecurity risk analysis and compliance. *Audit or safety and soundness examination experience strongly desired. Commissioned examiners strongly encouraged to apply* In addition to meeting the above minimum qualification requirements, applicants must also meet one of the following basic requirements for this position: BASIC REQUIREMENTS: To be eligible for the 0570 series, you must meet one of the following requirements: A. Undergraduate and Graduate Education: Major study -- accounting, banking, business administration, commercial or banking law, economics, finance, marketing, or other fields related to the position. -OR- B. Specialized Experience (for positions above GS-5): Examples of qualifying specialized experience include: Work requiring a thorough knowledge and the application of commercial accounting or auditing principles and practices (but less than full professional accounting knowledge) with a financial institution. Examining or auditing such financial institutions as savings and loan associations, savings or commercial banking institutions or trust companies, farm credit associations, or Federal or State credit unions. Professional accounting or auditing work that provided a broad knowledge of the application of accounting or auditing principles and practices. Work that provided a thorough knowledge of Federal and State laws applicable to the type of financial institution involved (e.g., savings and loan associations, Bank for Cooperatives, savings or commercial banks, investment institutions, etc.), and of the operations and practices of such institutions. -OR- C. Certificate: A certificate as a Certified Public Accountant (CPA) obtained through written examination in a State, territory, or the District of Columbia meets the EL/GS-5 level requirements. Applicants with such certificates may also qualify for higher grade levels based on their education and or experience. **Failure to provide your transcripts, when required, for any of the options above will remove you from the hiring process** Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Before you apply
Federal applications are different: your resume should be 3–5 pages and mirror the language of this announcement. Read our federal resume guide first — it's the #1 reason qualified people get screened out.
Similar openings
Browse all →Supv National Bank Examiner/Bank Examiner (LB Team Lead) w/emphasis in BIT & Ops Risk, NB-0570-VII
Chief, Risk Management and Applications Section, CM-0570-00
Deputy Comptroller for Regional and Midsize Financial Institutions, NB-0570-VIII
Don't miss the next one.
Get an email the moment a similar federal job opens — postings can close in as little as 5 days.