Lead Technology Risk Analyst

Our Purpose Mastercard powers economies and empowers people in 200 countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Lead Technology Risk Analyst Overview Technology Risk for Services empowers Mastercard to provide regulators, auditors, and customers, assurance of our strong practices around risk management, control best practices, data, operational resiliency, IT operations, and security. We drive key risk management activities for the Services Business Unit to ensure a secure and resilient technology control environment— empowered by a multi-disciplinary team of top technology and risk professionals. We provide risk intelligence and analysis, and streamline and scale assurance activities through automation, reusability, and self-service. Responsibilities: o Perform technology control testing and execute assurance programs (e.g., ISO, PCI DSS, SOC 2), partnering with stakeholders to support audit readiness, evidence management, and closure of control gaps. o Advise and assist with the implementation of technology and information security policies and strategies, promoting a culture of risk awareness and compliance. o Support the optimization of technology risk and controls activities to demonstrate technology compliance across multiple markets, leveraging common elements and focusing on reusability. o Identify opportunities within the risk management lifecycle for automation, leveraging existing service operations tools to drive efficiency and consistency across the business. o Maintain and enhance templates used for risk management activities, such as risk assessments and risk and control self-attestations, based on industry best practices. o Collaborate with technology partners - Engineering, Business Operations, Security Leads, and Risk Management teams to understand and translate technology and security risk management requirements, perform gap analysis, provide recommendations, and assist in developing remediation plans. o Assist with the design and implementation of controls to demonstrate compliance with technology and security standards and associated control requirements, supporting remediation approaches to ensure tracking and closure of gaps. o Evaluate the current state of controls in relation to industry best practices and Mastercard standards, providing recommendations to enhance controls maturity. o Share best practices and leverage trend analysis to execute business and cross-functional strategies around managing obligations. o Report on technology and security risk and compliance trends, assisting in risk treatment, including exception and escalation awareness. Experience: o Strong foundation of risk management fundamentals, lifecycle and processes (e.g., methods for identifying, assessing, treating, and monitoring risk). o Prior experience executing Tech risk and control activities (e.g., RCSA, Internal/external audits, risk assessments, SOC2/ISO/PCI) in first, second or third line of defense o Background in technology audit, risk management, technology operations, information systems management, information security management, etc. o Strong knowledge of baseline technology and security processes, risks, and controls. Tech and Information Security control testing experience preferred o Familiarity with technology/security frameworks and mechanisms (e.g., SOC 1, SOC 2, PCI-DSS, ISO 27001, COBIT, CRI). o Understanding of regulatory technology and security risk management expectations. o Knowledge of current and emerging technologies and their potential for exploitation. o Experience collaborating cro ... (truncated, view full listing at source)