Director, Technology Risk Management

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Director, Technology Risk ManagementOverview
The ONE ("The Operations, Network, and Employee Digital Experience teams focus on the underpinning platforms that power our Network and the employees that serve it") Technology Operations Controls team is a group focused upon establishing both foundational and transformational risk management practice at Mastercard Technology. Responsibilities include, but are not limited to, leading efforts in support of Technology partners with identifying control gaps, designing key control activities, monitoring such activities (via assessment and testing), and driving risk remediation with TeamONE platform and program owners.
This is an exciting opportunity to be in a leadership role taking part in solving complex problems and working with great Mastercard technology leaders in operations and platforms. This highly visible role will be focused upon leading both global and regional efforts and direct supervision of resources proactively identifying, monitoring, and managing technology risks to protect Mastercard Technology and our customers.
In this role you'll combine your technical, risk, control and leadership expertise with your keen eye for detail to assess, create, implement, and test robust control activities that fortify TeamONE against threats and potential issues. If you're ready to be at the forefront of technological risk management, we invite you to bring your technology controls experience and leadership skills to our innovative and collaborative environment.

Role

• Leading both the assessments and testing of IT controls and processes to identify deficiencies, deviations and compliance gaps.

• Managing resources supporting local and global technology risk management and control efforts.

• Serving as a regional primary team point of contact for technology risk management and control efforts.

• Lead and perform IT and operational control walkthroughs to determine existing process controls and adherence to control framework supporting both assessment and testing activities.

• Leading efforts to support the development and updating of control and process documentation, and relevant standards.

• Partner with first- and second-line risk management teams for all risk related functions to ensure alignment on risk management methodology, practices, terminology, etc.

All About You
Technical Proficiency:
o Experience serving in a leadership function supporting both local and global technology risk and control efforts.
o Knowledge of IT general controls and related operations.
o Experience in Mainframe, Oracle, SQL, Unix/Linux, HP Nonstop and/or Windows environments.
o Knowledge of cybersecurity principles, best practices, and threat landscape.
o Ability to both lead and assess technology controls, vulnerabilities, and potential risks.
o General understanding of technology infrastructure.

Risk Management Expertise:
o Leadership experience with developing, implementing, and delivering technology risk assessment and mitigation approaches.
o Demonstrated leadership abilities in managing and performing technology risk and control assessment and testing activities along with the resources who execute them.
o Leadership experience in developing and implementing technology risk management frameworks and strategies.
o Strong understanding of industry standards and regulatory requirements related to technology risk management (e.g., ISO 27001, NIST Cybersecurity Framework).

Regulatory and Compliance Knowledge:
o Leadership experience in developing, performing, and evaluating/assessing technology controls and testing/validation.
o Demonstrated ability to align the organization's technology practices with legal and regulatory standards.

Execution and Communication:
o Demonstrate strong leadership and execution skills, consistently meeting and exceeding team project deadlines, and goals.
o Demonstrate ability to work as a leader, independently and in a team environment, ensuring tasks are completely, thoroughly and accurately executed.
o Exceptional attention to detail with keen ability to identify errors or discrepancies in processes or documentation.
o Strong analytical skills to identify potential risks, assess their potential impact, and devise effective mitigation strategies.
o Excellent communication skills to effectively convey technical concepts to both technical and non-technical stakeholders, including executive management.
o Ability to lead and collaborate with cross-functional teams, including other technology, security, compliance, application / product teams, and business / regional teams.

Qualifications (preferred but not required)
o Bachelor's degree in Information Technology, Computer Science, or a related field.
o Experience in leading evaluations assessing compliance with legal, regulatory, operational and IT requirements.
o Professional Certification or Designation (e.g., CISA, CIA, CISSP, or equivalent).
o Experience in payment eco systems.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

---