Director of Risk Management, Mastercard

• Demonstrate abilities in leading technology risk and control assessment and implementation activities
• Knowledge of IT general controls and related operations
• Experience in Mainframe, Oracle, SQL, Unix/Linux, HP Nonstop and/or Windows environments
• Knowledge of cybersecurity principles, best practices, and threat landscape
• Ability to both lead and assess technology controls, vulnerabilities, and potential risks
• General understanding of technology infrastructure
• Background in technology audit, risk management, technology operations, information systems management, information security management, regulatory engagement, etc
• Strong knowledge of the risk management lifecycle and processes (e.g., methods for identifying, assessing treating and monitoring risk)
• Leadership experience with developing, implementing, and delivering technology risk assessment and mitigation approaches
• Leadership experience in developing and implementing technology risk management frameworks and strategies
• Strong understanding of industry standards and regulatory requirements related to technology risk management (e.g., SOC 1, SOC 2, ISO 27001, PCI-DSS, COBIT, NIST Cybersecurity Framework)
• Experience with regulatory technology and security risk management expectations
• Leadership experience in developing, performing, and evaluating IT internal controls and testing
• Demonstrate ability to align the organization's technology practices with legal and regulatory standards
• Demonstrate strong leadership and execution skills, consistently meeting and exceeding team project deadlines, and goals
• Demonstrate ability to work as a leader, independently and in a team environment, ensuring tasks are completely thoroughly and accurately
• Exceptional attention to detail with keen ability to identify errors or discrepancies in processes or documentation
• Strong analytical skills to identify potential risks, assess their potential impact, and devise effective mitigation strategies
• Excellent communication skills to effectively convey technical concepts to both technical and non-technical stakeholders, including executive management
• Ability to lead and collaborate with cross-functional teams, including other technology, security, compliance, application / product teams, and business / regional teams

Desirable

• The ONE (“The Operations, Network, and Employee Digital Experience teams focus on the underpinning platforms that power our Network and the employees that serve it”) Risk and Control team is a newly formed group focused upon establishing both foundational and transformational risk management practice at Mastercard Technology.
• Responsibilities include, but are not limited to, leading efforts in support of Technology partners with identifying control gaps, designing key control activities, monitoring such activities, and driving risk remediation with TeamONE platform and program owners
• This is an exciting opportunity to be in a leadership role taking part in solving complex problems and working with great Mastercard technology leaders in operations and platforms.
• This highly visible role will be focusing upon proactively identifying, monitoring, and managing technology risks to protect Mastercard Technology and our customers
• In this role you will combine your technical, risk, control, and leadership expertise with your keen eye for detail to create and implement robust control activities that fortify TeamONE against threats and potential issues.
• If you are ready to be at the forefront of technological risk management, we invite you to bring your risk management and leadership skills to our innovative and collaborative environment
• Lead the assessments of IT controls and processes to identify deficiencies, deviations, and compliance gaps
• Lead and perform IT and operational control walkthroughs to determine existing process controls and adherence to control framework for the following key control areas: Patch Management, End-of-Life/End-of-Support, Access Management, Configuration Management, Disaster Recovery, Asset Tagging and Inventory Accuracy and Completeness, Logging and Monitoring, and Change Management
• Within each assigned project, understand specific risks (e.g., strategic, operational, financial, legal, regulatory, technology, other) and business requirements. Lead the development of control activity documentation in qualitative and timely manner.
• Evaluate compliance with relevant policies, procedures, and requirements, assess controls design adequacy and operating effectiveness, and identify controls gaps and improvement opportunities.
• Lead the development of draft reportable issues for validation with management and understand related risk, impact, and root cause. Partner with management to develop action plans that remediate gaps identified in a sustainable manner. Track, monitor, and validate the completion of action plans by management
• Lead efforts to support the development and updating of control and process documentation, and relevant standards
• Based on criticality and urgency, support remediation activities and link such activities back to monitor risk rating
• Partner with first and second-line risk management teams for all risk related functions to ensure alignment on risk management methodology, practices, terminology, etc