Role
Be part of a dynamic global team and work collaboratively with colleagues, locally and from other Mastercard offices around the world. Be a champion and advocate for strong governance, risk management, internal controls, and partner with other risk and control functions across the organization to strengthen Mastercard three lines of defense model. Contribute actively to the effective and efficient delivery of assigned assurance or advisory projects across various markets, technology, products, services, or functional areas, as driven by the Internal Audit annual plan, as a project team member, owning specific scope areas within assigned projects. Within each assigned project and scope area, understand specific risks (e.g., technology, strategic, operational, financial, legal, regulatory, other) and business requirements, develop and execute risk-based testing, and document supporting workpapers in a complete, accurate and timely manner. Evaluate compliance with relevant policies, procedures, and requirements, assess controls design adequacy and operating effectiveness, and identify controls gaps and improvement opportunities. Develop and articulate draft reportable issues for validation with management and understand related risk, impact, and root cause. Partner with management to develop action plans that remediate gaps identified in a sustainable manner. Track, monitor, and validate the adequate and timely action plans completion by management.
All About You
Prior successful experience in internal and/or external auditing, with specific expertise in testing various operational areas and information technology / security areas (e.g., IT GCC, IT Operations, SDLC, UNIX, HP Non-Stop, Windows, Cloud environments, IT security practices, PCI DSS compliance, ISO 27001 standards). Ability to quickly understand and critically analyze complex processes, to identify and assess potential risks, and determine whether those risks are appropriately managed. Proficiency in various audit techniques such as inquiry, walkthrough, validation, reperformance, sampling, analytics, problem-solving, and root cause analysis. Excellent interpersonal and communication skills, both written and verbal, including professional fluency in Spanish and English. Ability to work well, both independently and within a team, deliver high-quality work, within budget and on time, intellectually curious, self-motivated, passionate, service-minded, culturally attuned, and flexible. Committed to self-development, constructive feedback, and seeking opportunities to capitalize on strengths and address development areas. Bachelor's degree with concentration in information systems, information technology, computer science or engineering. Relevant professional credentials and certifications (e.g. CISSP, CISA, CIA) are a plus Proficient with MS Excel, Word, PowerPoint, and familiar with ACL or similar data analytics / auditing tools. Ability to travel up to 10 %.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
