Senior Tech Risk Analyst

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Tech Risk Analyst

The Technology Risk & Controls (TRC) organization is a business enabler and industry leader of technology and security risk management practices, supported by a team of top security, technology, and risk professionals. Our mission is to provide enhanced visibility and proactive management of technology risks to ensure a secure and sound operational environment.

The Governance team is responsible for supporting internal and market-facing programs, inclusive of acquisitions and 3rd parties, to embed and align to Mastercard technology policies and standards. This role will be the face of TR&C, liaising directly with the Product and Engineering executives, as well as partnering with the program owners to identify, quantify, and prioritize risk/control issues for remediation. This role will also help facilitate the continuous monitoring of the changing external and internal environments and provide an aggregate view of risk to inform decision making and risk / reward tradeoffs.

Responsibilities:
• Develop relationships with program leads across the New Business programs, acting as the TR&C conduit to assist with technology and security risk management obligations
• Drive awareness of technology and information security policy and strategy expectations, and ensure sound principles are reflected in the program's goals that promote a culture of risk awareness and compliance
• Translate technology and security standards and associated control requirements to support operationalization/deployment
• Communicate best practices and leverage trend analysis to develop business and cross-functional strategies around managing obligations in a consultative manner, including continuous process improvement and controls automation
• Consult and oversee the development of a program’s risk register, including risks related to newly acquired entities and critical third-party relationships
• Assist in identifying risk and compliance trends and potential red flags, including exception and escalation awareness

Experience:
• BS degree in technology, information systems management, information security management, security policy or related program desired, but not required
• Experience collaborating cross-functionally, geographically to identify and implement best practice risk processes
• Knowledge of current and emerging technologies and potential for exploitation
• Familiarity with risk management processes (e.g., methods for assessing and mitigating risk)
• Strong IT technical knowledge
• Excellent writing and communication skills
• Systematic problem-solving approach, coupled with strong communication skills and a sense of ownership and drive
• Project Management Skills a plus
• Knowledge of Mastercard products and technology, security and other risk management programs and practices desired, not required

Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainin