ManagerTechnology Risk Management

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

ManagerTechnology Risk Management

Overview
Mastercard's Payment Networks organization plays a critical role in safeguarding the technology platforms that power global commerce. We are seeking a hands-on ISO 27001 professional to join our team in Pune as an individual contributor, driving certification, controls assurance, and risk management activities across critical payment technology platforms. This role offers the opportunity to work alongside a highly experienced team of security, risk, compliance, and payments subject matter experts, with market-competitive compensation and industry-leading benefits.

The Role
Oversee compliance and the implementation of design (up-to-date standard operating procedures) and operational effectiveness (testing the validity of procedures periodically).
Participate in the gathering, documenting, monitoring, and preliminary analysis of information security and technology metrics.
Identify, test, and report security weaknesses in systems and applications; participate in the risk management process, including documenting, reviewing, and updating systems on a regular basis, and contribute to the preparation of internal risk reports.
Maintain a strong understanding of security policies and regulatory compliance frameworks (e.g., ISO 27001, PCI DSS, GDPR).
Monitor technology risk and compliance, and develop, deliver, maintain, and monitor IT policies, standards, and best practices.
Oversee governance and compliance of vulnerability remediation enterprise-wide.
Support special projects as requested and provide ad-hoc support to management.
Develop effective working relationships with internal and external stakeholders, auditors, process and control owners, and functional staff.
Interact with related disciplines through committees and forums to ensure the consistent application of policies and standards across all technology functions.
Direct people management experience, mentoring and coaching team members, performance review during annual cycle and providing technical and execution direction to oversee and own independent deliverables

All About You
Required
Experience supporting information security, IT audit, and/or IT risk management principles.
Familiarity with risk management processes, including methods for assessing and mitigating risk.
Conceptual understanding of IT and security controls, networking, and information security technologies.
Knowledge of risk and control framework standards such as ISO 27001, NIST CSF, and PCI DSS.
Background in developing and maintaining security policies, processes, procedures, and standards.
Strong analytical and problem-solving skills for the design, creation, and testing of security controls and systems.
Bachelor's degree or equivalent combination of education and experience; a degree in Information Systems Management, Computer Science, Information Technology, or a related field is preferred.
Demonstrated experience handling certifications, compliance activities, and internal/external information security or cybersecurity audits.
Excellent written and verbal communication skills, with strong interpersonal skills and the ability to articulate ideas in a precise and concise manner.
Ability to contribute to a work environment that encourages knowledge of, respect for, and development of skills to engage with those of other cultures and backgrounds.
Ability to handle multiple tasks simultaneously and switch between tasks quickly.
Direct people management experience in current or previous role. Manage a team of FTEs minimum 4-5

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.