Job details

Lead, Information Security Analyst

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a

culture of inclusion

for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Job Title

Lead, Information Security Analyst

Role

Monitors technology risk and compliance, and develops, delivers, maintains and monitors IT security policies, standards, controls and best practices
Designs and implements a framework of technology controls across the enterprise to drive efficient organization, communication, collaboration and cooperation.
Works with different aspects of the business to identify opportunities to integrate the control framework into business processes to improve efficiency, compliance and collaboration.

Responsibilities

Implements policies and procedures to minimize risk exposure and drive the use of proper IT security controls.
Supports the management and facilitation of governance committees through the use of a framework of frameworks.
Provides data analysis and strategy execution across risk areas, leveraging an understanding of risk and regulation as they relate to a framework of controls.
Enact change by reporting risk identified using a tool based on a common framework.
Supports cross-functional initiatives to deliver on risk goals, policies and procedures.
Develops and manages risk processes, including identifying and implementing best practices and ensuring all processes are documented, reviewed, and updated regularly.
Develop a program across the enterprise to leverage a common framework to ensure all lines of business are operating under a common security program.
Work closely with colleagues across TRM to understand their needs to demonstrate evidence-based compliance while promoting a risk-based security environment.
Understand the role cyber and information security frameworks and standards play in enabling Mastercard to demonstrate its culture of security.
Understand and support the Corporate Security risk strategies that maintain the status of industry compliance standards (e.g., PCI, ISO, CRI Profile) for applications that process, store or transfer credit card information and the enterprise infrastructure where they reside.
Understand and support the Technology risk strategies that maintain the status of payment, financial and industry data standards accessible to Mastercard’s third parties according to Mastercard Technology Policies and Standards, performing critical vendor reviews and Mastercard subsidiary reviews globally.
Understand and support the Technology risk strategies that maintain the necessary focus and quality of the due diligence and control validation functions within risk management.
Understand and support the Technology risk strategies that maintain the status of the Stakeholder Assurance function that provides interface controls and expertise for responding to customer requests, RFP support and customer audit support.

All About You

Experience collaborating cross-functionally to identify and implement best practice risk processes.
Enthusiastic about learning and gaining exposure to all elements of the business while focusing on the task at hand.
Experience with managing multiple tasks and projects progressing concurrently.
Comfortable being part of a team and willing to contribute towards the team’s success.
Demonstrates energy, drive and enthusiasm about accomplishing goals.
Experience delivering presentations and supporting messaging with senior leadership.
Experience advocating for improvement in policy and procedure when necessary.
Ability and initiative to identify areas of improvement and drive constant improvement.
Experience with control frameworks such as NIST CSF, CRI Profile, or international standards such as ISO standards.
Experience working with and presenting to senior management.
Outstanding verbal and written communication skills.

In the US, Mastercard is an inclusive Equal Employment Opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. If you require accommodations or assistance to complete the online application process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Mastercard Glassdoor Company Review

4.3

Mastercard DE&I Review

4.4

CEO of Mastercard

Michael Miebach

Approve of CEO

By Mastercard

We believe in connecting everyone to Priceless possibilities. We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible.

112 jobs

BADGES