Senior Technology Risk Analyst

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Technology Risk Analyst

RF 323 - This position has been approved and will be funded by the Recorded Future business case
The Mastercard Technology Risk & Control Team is on the lookout for a Senior Technology Risk Analyst to manage the controls assurance program, which is critical for adhering to customer and regulatory requirements in the relevant region. The primary responsibilities will include providing compliance support, as well as monitoring and reporting on the ongoing operational effectiveness of Mastercard’s internal control framework. This role will be a key element of the Mastercard Technology Risk & Control function.
Mastercard is committed to balancing innovation while protecting the internal control posture. The team assesses internal controls to proactively identify risks, define remediation actions and track remediation efforts. We are looking for someone to join our team and help us meet these compliance goals. This person will be a technically savvy person who likes to solve issues and drive outcomes.
The ideal candidate will have the ability to think and act both strategically and tactically while ensuring that the organisation remains compliant with required security, technology standards, as well as industry best practices.
Job Responsibilities
• Serve as a consultant and central point for activities and responsibilities related to security and compliance, which encompasses the implementation of ISO 27001, ISO 9001, and ISO 27701 standards within the organization.
• Identify potential security risk & issues through control assessments and ensure their resolution within specified timelines.
• Establish and monitor remediation efforts both internally and externally until resolution, while enhancing the design and operational efficiency of controls.
• Document the results of assessments and prepare assessment reports for key stakeholders.
• Collaborate with front line, and internal information security teams to meet deadlines effectively.
• Prepare compliance status reports and dashboards for key initiatives, plans, and audit tracking of current processes in accordance with management requirements.
About You:
• Experience working within digital and technology functions ideally in a compliance role.
• Strong understanding of security risk management frameworks such as ISO 27001/27002, ISO 9001, ISO 27701.
• Bachelor’s degree or equivalent combination of education and experience/Bachelor’s degree in computer science, information technology or related field preferred
• One or more professional certifications like CISA or CISSP (desirable)
• Professional Certifications ISO 27001, ISO 9001 Lead Auditor and Implementer
• Strong understanding of information security domains and possesses along with a well-rounded technical background. Basic knowledge of infrastructure, application security is a must.
• Excellent communication, organization time management and problem-solving skills
• Demonstrated experience in managing complex projects related to information security

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.