Director, Technology Risk

Mastercard•Town/Village of Harrison, NY

About The Position

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. The Technology Risk team is looking for a Director, Technology Risk, who will be responsible for providing independent Second Line technology risk oversight of Mastercard’s International Markets and maintaining a robust technology risk management framework for the Company. The ideal candidate is passionate about risk, technology and security controls and has experience working autonomously and in a global environment. The role will report to the Vice President, Technology Risk, who leads the Framework and Markets Oversight team. The role will partner closely with the other technology risk teams as well as with other risk functions (e.g., Enterprise Risk Management, Operational Risk and Controls). The role will engage directly with several key stakeholder groups across the organization, including the First Line of Defence technology risk, regional technology and security teams as well as regulatory affairs in support of regulatory engagements.

Requirements

Proven experience collaborating with cross functional and global teams, managing multiple stakeholders, and navigating various regulatory environments.
Ability to manage multiple priorities, deliverables, and initiatives simultaneously in a fast-paced environment.
Proactive and curious mindset, with the ability to engage broadly across the business while maintaining focus on core responsibilities.
Experience advocating for policy and procedure enhancements when necessary.
Strong ability to identify opportunities for improvement and driving continuous enhancement.
Familiarity with enterprise risk and control frameworks such as ISO, NIST CSF, COBIT, CRI, FAIR or other equivalent International standards.
Experience working with, and presenting to, senior management and governance forums, including executive level and Board adjacent committees.
Excellent verbal and written communication abilities, with the ability to translate complex technology risk topics into concise, executive ready messaging.

Nice To Haves

Preferably some experience in First and Or Second Line of Defence risk roles, providing independent oversight

Responsibilities

Provides independent Second Line oversight and constructive review of regional operational resilience and security risks, technology product and security risk assessments and risk assessments related to material product / technology changes and significant third-party or outsourcing arrangements.
Provides Second Line oversight across key technology control areas in support of regional governance, including reviewing control design, assessing operating effectiveness, and examining control testing results and assurance outcomes. Escalates and monitors material control deficiencies / remediation delays and risk acceptance items where residual risk exceeds tolerance until closure.
Oversees the development of technology and security risk metrics, ensuring they are meaningful and outcomes focused, and aligned with approved risk appetite and tolerance thresholds.
Ensures technology teams develop a regionally relevant strategy and policies / standards, supporting risk reduction and promoting the implementation of robust IT and security controls.
Support the creation and evolution of a robust technology risk framework in line with the Enterprise Risk Management framework and the Operational Risk Framework and ensure its regional adoption. This includes developing policies, standards, procedures and / or guidelines setting out Second Line expectations of the First Line.
Review and support local technology risk processes, ensuring its alignment with the Group technology risk framework and its alignment with local regulatory needs.
Provides support and validation of the global technology control framework in coordination with Group First Line of Defence Technology and Security Risk teams.
Acts as the Technology Risk representative at regional governance forums, risk committees, and senior management discussions, providing clear, evidence-based insights to support effective decision making.
Reviews the effectiveness of technology risk reporting inclusive of technology key risk indicators and risk acceptance to management and governance committees and promotes alignment with Group standards.
Supports regulatory examinations where required, on matters related to technology and security risk and controls, and reviews and supports other technology related submissions to regulatory authorities.
Maintains awareness of evolving regulatory and supervisory expectations related to technology risk, cyber security, operational resilience, and third-party risk.

Benefits

insurance (including medical, prescription drug, dental, vision, disability, life insurance)
flexible spending account and health savings account
paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave)
80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire
10 annual paid U.S. observed holidays
401k with a best-in-class company match
deferred compensation for eligible roles
fitness reimbursement or on-site fitness facilities
eligibility for tuition reimbursement

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume