Role
This role supports the first line Technology Risk Management function for MTS, helping to operationalize the technology risk framework, coordinate regulatory and supervisory reporting, and provide assurance over technology, cyber and third-party risk obligations.
The role works closely with MTS leadership, Mastercard corporate functions, Information Security, Technology, Compliance, Operational Resilience, Legal Entity Management and Internal Audit.
The ideal candidate is a proactive, outcomes-focused technology risk professional who can operate effectively in a regulated environment, build trusted relationships across functions, and translate complex technology and cyber risk matters into clear, actionable insights for management and governance forums.
What are we looking for
Experience in technology risk management, information security, cyber risk, IT audit, operational resilience, regulatory compliance or a related field. Strong understanding of technology and cyber risk frameworks, controls, risk assessment methodologies and issue remediation processes. Experience supporting regulated financial services, payments, technology or operational resilience environments is preferred. Experience managing or participating in the RCSA process, ideally within a financial services, IT or payments context, including experience working in first- or second-line risk teams or within third-line Internal Audit functions in a financial services environment. Familiarity with regulatory requirements such as DORA,EBA ICT Guidelines, operational and security risk reporting, ICT risk management, third-party risk management and control effectiveness reporting. Ability to coordinate across multiple stakeholders, manage competing priorities and deliver high-quality outputs under regulatory or governance timelines. Strong analytical, written and verbal communication skills, with the ability to prepare concise reporting for senior management, committees, auditors and regulators.
Qualifications
- A bachelor's degree in technology, information security, computer science, risk management or a related discipline is preferred. Relevant professional experience will also be considered.
- Professional certifications such as CRISC, CISSP, CISM, CISA are desirable.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
