Vice President, Information Security Engineering

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Vice President, Information Security Engineering

Overview
The Vice President, Employee Access Management Governance is responsible for leading the governance, standards, controls, onboarding, compliance, audit, and operational management functions across Employee Access Management. This role ensures that access management processes are consistently defined, enforced, measured, and improved across the enterprise, while balancing security, operational effectiveness, user experience, and regulatory expectations.
The VP will establish and maintain the governance model for access management capabilities across workforce, privileged, application, machine, and emerging AI-based identities. This includes ownership of access management standards, process controls, operational routines, audit readiness, compliance support, policy alignment, onboarding governance, issue remediation, and continuous improvement across the EAM environment.
This leader will partner closely with product, engineering, cyber risk, technology, compliance, audit, application owners, service teams, and business stakeholders to ensure access management practices are scalable, well-controlled, operationally effective, and aligned to enterprise security objectives.
Responsibilities
Lead the EAM Governance organization responsible for access management governance, standards, controls, compliance, audit support, policy alignment, onboarding governance, and operational process enforcement.
Define, maintain, and enforce enterprise access management standards, procedures, operating models, and control expectations across EAM capabilities.
Own the day-to-day governance and operational management of EAM processes, ensuring teams follow defined standards, controls, service expectations, and compliance requirements.
Provide leadership over access management compliance, audit readiness, control execution, evidence management, remediation tracking, and regulatory response activities.
Partner with internal audit, compliance, risk, and control teams to ensure access management controls are clearly defined, effectively executed, continuously monitored, and supported with appropriate evidence.
Lead governance over application onboarding into EAM capabilities, ensuring consistent intake, prioritization, readiness assessment, control alignment, documentation, and operational handoff.
Establish standards and governance for onboarding emerging access use cases, including AI-enabled applications, AI agents, machine identities, service accounts, privileged access patterns, and non-human identities.
Oversee operational access management processes, including recurring business-as-usual activities, work order resolution, service channels, access hygiene, segregation of duties support, user acceptance testing, quality assurance, and process optimization.
Drive continuous improvement across EAM governance and operations by using metrics, process performance data, issue trends, customer feedback, risk indicators, and control outcomes.
Lead remediation efforts related to audit findings, control gaps, policy exceptions, operational issues, and access management process deficiencies.
Partner with EAM Product and Engineering teams to ensure governance, compliance, onboarding, and operational requirements are incorporated into product roadmaps, platform migrations, and modernization efforts.
Provide governance oversight for major EAM initiatives, migrations, and transformation activities, including EAM tool controls migration, EAM tool transition activities, governance-related processes, and other access management modernization programs.
Define and maintain clear accountability models across product, governance, operations, control owners, application teams, and business stakeholders.
Develop and sustain metrics, dashboards, and reporting that demonstrate control effectiveness, operational performance, onboarding progress, remediation status, audit readiness, and risk reduction.
Ensure EAM processes comply with applicable regulatory, operational, security, and enterprise policy requirements.
Serve as a senior authority on access governance decisions, control expectations, operational risk, policy interpretation, audit response, and process design.
Experiences