Our PurposeMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and SummaryPrincipal, Technology Standards Governance
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Overview
The Technology Standards Governance team is seeking a Principal, Technology Risk Analyst to provide strategic leadership and subject-matter expertise across technology policies and standards. The role leads technology policy reviews and stakeholder engagement, helps shape and execute the Technology Standards Governance strategy, strengthens standard owner knowledge and understanding, and drives continuous improvement across governance processes, tools, training, and regulatory and audit support. The position also connects the Technology Controls Governance and Technology Standards Governance teams to promote consistent, risk-informed reviews and effective execution.
Role
• Lead the annual reviews of technology policies, ensuring stakeholder engagement, alignment with Technology Standards, and adherence to the policy governance framework.
• Develop, maintain, and deliver training aligned with Technology Policy.
• Lead the annual reviews of technology standards, ensuring stakeholder engagement and adherence to the technology standards governance framework.
• Co-lead monthly technology standards governance meetings, including meeting preparation, end-to-end process improvements, and alignment with approving members.
• Develop, maintain and implement standard owner procedures and playbooks, and design and deliver training to support consistent execution.
• Own the tools supporting standards governance including but not limited to leading and providing direction for updates.
• Lead responses to regulatory and audit obligations (e.g. SOC, SOX, and RBI) by serving as the primary point of contact, reviewing supporting materials, and coordinating evidence submission.
• Foster collaboration between the Technology Controls Governance and Technology Standards Governance teams to drive alignment between technology standards and associated control expectations, serving as a credible challenge function to ensure control expectations are established, maintained, and aligned with enterprise standards and industry-leading practices.
• Foster collaboration between Tech Risk Governance and Technology Standards Governance teams to drive alignment between technology standards and risk environments.
All About You
The ideal candidate is a hands-on technology risk leader who can bring structure, judgment, and execution discipline to technology standards governance program.
• Bachelor's degree or equivalent combination of education and experience in information technology, technology risk management, audit, cybersecurity, governance, or related fields preferred.
• Experience leading or overseeing policy/standard governance, technology control testing, internal audit, compliance testing, assurance, or risk-based control assessment programs.
• Demonstrated ability to define and execute a compliance monitoring methodology.
• Strong communication skills with the ability to translate standard updates and compliance monitoring outcomes into clear reporting for Technology leadership, risk governance forums, regulators, auditors, and other stakeholders.
• Proven ability to work across teams, standard owners, risk partners, and senior stakeholders to drive updates to our technology policies and standards.
• Comfortable building and updating repeatable processes.
• Familiarity with financial services, payment technology environments, regulatory expectations, and industry control frameworks such as SOC 1/2, SOX, ISO 27000, ISAE 3000/3402, NIST, RBI, CROE, PCI, CRI, and UCF
Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Corporate Security ResponsibilityAll activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
