Director, Product Management- Cybersecurity Standards

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Director, Product Management- Cybersecurity Standards

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Services within Mastercard is responsible for acquiring, engaging, and retaining customers by managing fraud and risk, enhancing cybersecurity, and improving the digital payments experience. We provide value-added services and leverage expertise, data-driven insights, and execution

Overview

As a Director, Product Management- Cybersecurity Standards, you will play a critical role in defining, developing, and managing cutting-edge cybersecurity standards tailored to meet the unique regulatory, compliance, and operational needs of the financial services industry. You will leverage your deep understanding of industry standards such as PCI DSS, ISO 27001, and emerging regulations to create solutions that ensure security, compliance, and risk management across financial institutions. In this role, you will own the end-to-end process of productizing these standards, driving market adoption, and maintaining their relevance in an evolving threat landscape.

All About You

We are looking for candidates who demonstrate the following core competencies:

• Product Development & Management: Lead the creation and lifecycle
management of cybersecurity standards for the financial services industry,
ensuring they address compliance and risk management challenges.
• Strategic Roadmap: Define and execute a strategic product roadmap aligned with
key industry regulations (e.g., PCI DSS, GDPR, SOX) and financial sector needs.
• Industry Collaboration: Engage with financial institutions, regulatory bodies, and
industry stakeholders to ensure standards align with emerging cybersecurity
risks and regulatory requirements.
• Market Research & Insights: Conduct market research and customer discovery to
identify gaps, opportunities, and evolving needs within the financial services
sector for new standards.
• External Partnership: Work with industry groups, standards bodies, and
regulators to shape new security standards that address both current and future
financial threats.
• Portfolio Evolution: Continuously update the cybersecurity standards portfolio to
reflect changes in financial regulations, evolving threats, and industry best
practices.
• Go-to-Market Strategy: Collaborate with sales, marketing, and customer success
teams to create effective go-to-market strategies that promote the adoption of
cybersecurity standards.
• Thought Leadership: Represent the organization at industry events, standards
committees, and financial services forums, acting as a thought leader in
promoting your cybersecurity products.
• Market Positioning & Competitive Strategy: Analyze market trends, define pricing
models, and shape competitive strategies for financial cybersecurity standards.
• Stakeholder Engagement: Regularly engage with CISOs, CTOs, and other key
security leaders within financial services to gather insights, feedback, and drive
continuous improvement of products.

The ideal candidate for this position should:

• Extensive product management experience, specifically within cybersecurity for
the financial services industry.
• Strong knowledge of financial services cybersecurity standards (e.g., PCI DSS,
ISO 27001, SOX) and regulatory frameworks (e.g., GDPR, CCPA).
• Proven experience in developing customer-centric products for financial
institutions, with a focus on cybersecurity, threat intelligence, risk management,
and compliance.
• Track record of working with external regulators and industry standards bodies
to influence and shape cybersecurity practices.
• Deep understanding of the financial services cyber threat landscape and the
ability to create solutions that mitigate these risks.
• Experience in developing and executing go-to-market strategies, with a focus on
driving adoption within the financial sector.
• Strong communication and stakeholder management skills, with the ability to
engage and influence executive leaders at financial institutions.
• Ability to stay informed on emerging financial regulations and cybersecurity
trends to ensure continuous product relevance.

Educational Requirements:
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems,
or a related field (Master’s degree preferred).
• Background in financial services or cybersecurity regulation highly preferred.

Preferred Certifications:
• PCI Professional (PCIP)
• Certified Product Manager (CPM)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)

In this role, you will drive the development and adoption of industry-leading cybersecurity standards specifically designed for financial services, ensuring that institutions stay ahead of regulatory changes, mitigate risks, and maintain the highest levels of compliance and security.

Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

NOTE: Candidates go through a thorough screening and interview process. There is no need to include all preferred skills in the job description.

Mastercard is an inclusive equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.