Manager, Technology Risk Management

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart, and accessible. Our technology and innovation, partnerships, and networks combine to deliver a unique set of products and services that help people, businesses, and governments realize their greatest potential.

Title and Summary

Manager, Technology Risk Management

Overview

The Mastercard Technology Regulatory Relations & Market Compliance Team is looking for a Manager (Lead) Technology Risk Analyst to be part of the controls' assurance program supporting various requirements to meet customer and regulatory obligations for the related region. The focus of the role would be on providing compliance support, monitoring, and reporting on the ongoing effectiveness of Mastercard's internal control environment while ensuring compliance with regulatory requirements, internal policies, and industry standards.

Mastercard is committed to balancing innovation while protecting the internal control posture. The team assesses internal controls to proactively identify risks, define remediation actions, and track remediation efforts. We are looking for someone to join our team and help us meet these compliance goals. This person should be technically savvy, enjoy solving issues, and driving outcomes.

The ideal candidate will have the ability to think and act both strategically and tactically while ensuring that the corporation remains compliant with required security, technology, and financial standards, as well as industry best practices.

Job Responsibilities

1. Act as an advisory and focal point for security and compliance-related activities, including implementation of ISO 27001 standards within the organization.
2. Identify and evaluate technology risks and potential security weaknesses through risk and control assessments across systems, applications, infrastructure, and processes in accordance with industry standards.
3. Establish and track remediation efforts internally and externally until resolution, while improving the design and operational effectiveness of controls.
4. Collaborate with key internal stakeholders from Technology and Business to ensure deliverables are accurate, complete, timely, and meet expectations.
5. Proactively suggest process improvements and stay informed of evolving regulatory and cybersecurity requirements.
6. Provide risk insights to leadership through risk dashboards for key initiatives, plans, and audit tracking according to management requirements.

About You:

• Experience working with digital and technology functions, ideally in a technology and/or cybersecurity compliance role, including managing complex technology/cybersecurity audits or regulatory projects.
• Strong understanding of IT general controls and risk management frameworks such as NIST, ISO 27001/27002, GDPR, and data privacy regulations.
• Bachelor's degree or equivalent experience; degree in Computer Science, Information Technology, or related field preferred.
• Possession of professional certifications such as CISA or CISSP, or ISO 27001 Lead Auditor/Implementer (Desirable).
• Proficiency in information security domains, with a technical background in IT processes and systems-related risks.
• Self-driven with strong organizational and time management skills.
• Experience managing complex information security projects.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks carry inherent risks. Therefore, every employee or representative must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of accessed information;
• Report any suspected security violations or breaches;
• Complete all mandatory security trainings as per Mastercard's guidelines.