Technology Risk Manager

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Technology Risk Manager

Job Title: MTS Tech Risk Manager (2LOD)

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

MTS Overview:

Mastercard Transaction Services [MTS] is the division responsible for the management of the legal entities under which all Mastercard’s current licensed cross-border transactions (and in the future other regulated activities) will be conducted. The MTS division (and associated MTS shared services functions) are housed under the umbrella of Mastercard Transaction Services and are comprised of the components which are necessary to support the activities of a licensed payment services firm. These components include:

· The maintenance of payment institution/money transmitter licenses (and in future state, other applicable payment services licences) for operating payments business in defined jurisdictions.

· Currently supporting cross-border account-to-account payments globally, designing for crypto (stable coins) and exploring Open Banking and other products.

· Associated settlement accounts and other treasury services for the relevant MTS entity.

· Compliance services including but not limited to real-time sanctions screening / AML / Fraud

· Regulatory reporting to the relevant regulators on behalf of the regulated business and its subsequent activities.

Overview

This is an exciting opportunity to be part of the MTS Information Security and Risk Management organization and work with risk, security and technology leaders proactively monitoring and managing technology risks to protect Mastercard Technology and our customers.

If you're ready to be at the forefront of technological risk management, we invite you to bring your skills to our innovative and collaborative environment.

Responsibilities include the following:

· Deliver risk management oversight and expertise in relation to security and technology.

· Support the delivery of MTS’s Technology Risk Management framework for all technology platforms (including Cross-Border Services Platforms) supported by MTS globally.

· Partner with Mastercard global Technology Risk Management and 2nd line Risk Management teams for all risk related activity to ensure alignment on risk management methodology, practices, terminology, etc.

· Perform independent assessments of the design and operating effectiveness of internal controls for Cross-Border Services Operations and other products to identify deficiencies, deviations, and compliance gaps.

· Develop and update control and process documentation.

· Liaise with and support the risk and control owners to resolve any questions, queries and problems relating to technology risks.

· Provide risk briefings to the management ensuring risks, issues and appetite breaches are monitored and escalated thoughtfully.

· Work with control owners to collect security and operational metrics required for management reports and dashboards.

· Coordinate internal and external audits including but not limited to gathering, reviewing, and storing of evidence, scheduling meetings with stakeholders, liaising with internal control owners and the external auditors to ensure smooth completion of the audits.

All About You

· Experience of using technology and information security risk management frameworks and related practices including knowledge of technology risk assessment and mitigation approaches.

· Relevant experience of working in a complex (preferably global) stakeholder environment that includes complex customers and regulators.

· Experience of working with Information Security frameworks such as the ISO 27001 and the NIST Cybersecurity Framework and other key industry technology frameworks and standards.

· Experience of working in regulated payments and financial services, ideally cross-border payments and crypto payments, or other regulated payment flows

· Ability to assess technology controls, vulnerabilities, and potential risks

· Knowledge of cybersecurity principles, best practices, and the threat landscape.

· Experience in handling regulatory and customer audits, conducting assessments and good understanding of governance, risk and compliance practices.

· Excellent communication skills with both technical and non-technical stakeholders

· Ability to develop trusted relationships with peers and senior stakeholders.

Qualifications (preferred but not required)

· Bachelor’s degree in Information Technology, Computer Science, or a related field.

· Professional Certification or Designation ((e.g., CISA, CISM, CISSP, or equivalent)

· Experience in evaluating compliance with IT, legal, regulatory, and operational requirements.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.