Manager, Risk Management

gement and plays a key role in executing risk management practices within the GBSC Revenue Services vertical and other assigned areas. This role supports the implementation of risk frameworks, facilitates control testing, and partners with process owners to identify and mitigate operational risks.

Role:
• Support the execution of operational risk programs within assigned business areas.
• Assist in conducting Risk Control Self-Assessments (RCSAs), including documentation, analysis, and follow-up on action items.
• Collaborate with process owners to identify risks and recommend mitigation strategies; maintain and update the risk register.
• Track and report operational issues, root causes, and remediation progress.
• Perform control testing to assess design and effectiveness of key controls.
• Monitor Key Risk Indicators (KRIs) and escalate emerging risks to leadership.
• Support audit readiness and coordinate responses to internal/external audit requests.
• Contribute to the development and delivery of risk training and awareness initiatives.
• Help deploy GBSC risk tools, templates, and resources consistently across teams.
• Partner with internal risk teams to ensure alignment with enterprise-wide risk practices.

All About You:
• Bachelor's degree in Business, Risk Management, Finance, or related field.
• 3-5 years of experience in operational risk, internal audit, compliance, or process controls.
• Strong analytical and problem-solving skills; experience with data-driven risk reporting.
• Effective communication and presentation skills.
• Ability to collaborate across teams and influence without direct authority.
• Familiarity with risk frameworks (e.g., COSO, ISO 31000) and GRC tools.
• Experience with billing systems or shared services environments is a plus.
• Certifications such as CRMA, CISA, CIA, or Six Sigma are a plus but not required.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.