Senior Technology Risk Analyst: Program Manager, Risk & Controls

Mastercard • O'fallon, MO

1d • $88,000 - $141,000

About The Position

Senior Technology Risk Analyst: Program Manager Overview The ONE (“The Operations, Network, and Employee Digital Experience teams focus on the underpinning platforms that power our Network and the employees that serve it”) Technology Operations Controls team is a group focused upon establishing both foundational and transformational risk management practice at Mastercard Technology. Responsibilities include, but are not limited to, executing efforts in support of Technology partners with identifying control gaps, designing key control activities, monitoring such activities (via assessment and testing), and driving risk remediation with TeamONE platform teams. This is an exciting opportunity to be part of solving complex problems and working with great Mastercard technology leaders in operations and platforms. In this role you'll combine your technical, risk, and control expertise with your keen eye for detail to assess, create, implement, and test robust control activities that fortify TeamONE against threats and potential issues. The Risk & Control Practice plays a critical role in ensuring Mastercard’s technology platforms operate in a secure, resilient, and compliant manner while enabling business velocity. This role partners closely with TeamONE and various functions across Technology including Security, Risk, Audit, and Business stakeholders to drive disciplined execution of risk, control, and regulatory initiatives across complex, global environments. If you're ready to be at the forefront of technological risk management, we invite you to bring your technology controls experience to our innovative and collaborative environment. Role The Senior Technology Risk Analyst: Program Manager (TPM) is a senior individual contributor who owns the end to end delivery of technology programs focused on risk management, control design and execution, regulatory commitments, and operational resilience. The TPM operates at the intersection of engineering execution, risk frameworks, and executive stakeholder management, ensuring outcomes are delivered predictably, transparently, and at scale. You will own the planning, execution, and support the delivery of complex, cross functional technology programs within the TeamONE Risk & Control domain, from inception through completion.

Requirements

• Proven experience in a Lead or Senior Technical Program Manager role delivering complex, cross organizational initiatives
• Strong understanding of risk management, controls, and regulatory frameworks in large scale technology environments (US and EU preferred)
• Experience partnering with Risk, Audit, Security, Compliance, and Engineering teams
• Knowledge of IT general controls and related operations.
• Experience in Mainframe, Oracle, SQL, Unix/Linux, HP Nonstop and/or Windows environments.
• Knowledge of cybersecurity principles, best practices, and threat landscape.
• Ability to both assess and test technology controls, vulnerabilities, and potential risks.
• General understanding of technology infrastructure.
• Experience in delivering technology risk assessments, testing, and mitigation activities (e.g., understanding different steps in testing and how best to apply them).
• Demonstrated experience in both executing and leading technology risk and control assessment and testing activities as part of a larger team and as an individual contributor.
• General understanding of industry standards and regulatory requirements related to technology risk management (e.g., ISO 27001, NIST Cybersecurity Framework).
• Demonstrate strong execution skills, consistently meeting and exceeding team project deadlines, and goals both as an individual contributor and within a team dynamic.
• Demonstrate ability to work in a global team environment, ensuring tasks are completely, thoroughly, and accurately executed.
• Strong analytical skills to identify potential risks, assess their potential impact, and devise effective mitigation strategies.
• Excellent communication skills to effectively convey technical concepts to both technical and non-technical stakeholders, including executive management.
• Ability to collaborate with cross-functional teams, including other technology, security, compliance, application / product teams, and business / regional teams.

Nice To Haves

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Experience in evaluating (assessing/testing) compliance with legal, regulatory, operational and IT requirements.
• Professional Certification or Designation (e.g., CISA, CIA, CISSP, or equivalent).
• Experience in payment eco systems.

Responsibilities

• Lead and coordinate a portfolio of risk, control, and regulatory driven technology initiatives across multiple engineering and operational teams including assessments and testing activities of IT controls and processes to identify deficiencies, deviations, and compliance gaps.
• Develop and update control and process documentation in support of complying with relevant standards, regulatory, industry, and customer expectations.
• Track and manage risks, issues, and control gaps at multiple levels, ensuring timely mitigation and transparent escalation
• Based on criticality and urgency, support remediation activities and link such activities back to monitor risk rating
• Partner with front line and second line technology risk management teams to ensure alignment on risk management methodology, practices, terminology, etc.
• Serve as a trusted delivery partner to senior leaders across TeamONE focusing upon the successful delivery of Technology, Risk, Security, and Business functions
• Communicate program status, risks, and decisions clearly and concisely for senior leadership consumption
• Facilitate complex technical and risk discussions, ensuring alignment and informed decision making
• Drive data driven insights through metrics, reporting, and analysis to improve transparency and decision making
• Set a high bar for delivery discipline, risk awareness, and stakeholder communication

Benefits

• insurance (including medical, prescription drug, dental, vision, disability, life insurance)
• flexible spending account and health savings account
• paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave)
• 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire
• 10 annual paid U.S. observed holidays
• 401k with a best-in-class company match
• deferred compensation for eligible roles
• fitness reimbursement or on-site fitness facilities
• eligibility for tuition reimbursement

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees