Senior Information Security Engineer

Our Purpose Mastercard powers economies and empowers people in 200 countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Information Security Engineer Who is Mastercard? Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all Mission First, People Always As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day. By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission. Overview Mastercard is seeking candidates to join the Data Protection team with a focus on ShadowIT risk management, governance, and enforcement. As Mastercard accelerates innovation through SaaS, cloud services, and automation platforms, unapproved technology usage presents material data security, privacy, and compliance risks. This role is critical to defining and operating a clear, defensible blocking and escalation framework that protects Mastercard data while enabling informed business decisions. • Can you design and operate a structured blocking and escalation strategy for unapproved applications? • Can you balance security risk, business impact, and policy alignment in high visibility decisions? • Can you lead governance processes and metrics that scale across a global enterprise? Role • Contribute to the execution of the Shadow IT and Data Protection roadmap, with primary ownership of enforcement, escalation, and governance processes • Develop and maintain a Shadow IT blocking strategy framework for unapproved applications, including: – Blocking criteria and decision thresholds – Risk scoring aligned to data sensitivity, access, and exposure – Defined escalation paths for exceptions and high impact cases • Document all blocking decisions with clear business justification, technical impact assessment, and alignment to security and data protection policy • Establish and maintain communication protocols to notify stakeholders of application blocks, including timelines, approved alternatives, and available support resources • Manage unblock requests and escalations and exception processing, coordinating with Security Operations and business stakeholders to evaluate risk and determine outcomes • Partner with application, platform, and business teams to define paths to compliance, including remediation, onboarding to approved services, or decommissioning • Track and report Shadow IT metrics, including blocking trends, unblock volumes, escalation outcomes, incidents, and stakeholder satisfaction. • Work side by side with other team members to build and mature the Shadow IT governance process, while taking lead ownership of defined processes such as: – Escalations and exception handling – Cross functional coordination – Technical impact assessment – Policy alignment and enforcement • Build and operationalize a n ... (truncated, view full listing at source)