Lead Technology Risk Analyst

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Lead Technology Risk Analyst

Overview

*The Risk Management team is responsible for supporting maturity of the Technology Risk Framework and Corporate Security Risk Management program at MasterCard.
*Mastercard uses a best practise framework to identify, manage and report risks. The Program is intended to ensure the company's information assets and systems are managed in accordance with corporate security policies and standards, providing adequate protection of the environment.
*The risk management team is the 'process owner' for all security related risk assessments as well as the identification and tracking of discrete risks and policy exceptions.
*A crucial element of the risk management team is working with enterprise risk management, operational risk management and corporate security leaders to document acceptable levels of residual risk as it relates to the security program and the controls implemented for the purposes of risk reduction.

Role

*Develop risk processes, including identifying and implementing best practices and ensuring all processes are documented, reviewed and updated regularly.
*Perform risk assessment activities, including the planning, testing, reporting and recommending of appropriate remediation measures.
*Track and monitor risk mitigation and coordination of policy and controls to ensure that business partners are taking effective remediation steps.
*Maintain up-to-date understanding of industry best practices and monitor the legal and regulatory environment for developments that could require changes to established IT policies and practices.
*Work directly with teams from Enterprise Risk Management, Operational Risk Management and Corporate Security departments to facilitate IT risk analysis, identify acceptable levels of residual risk and establish roles and responsibilities related to risk reduction and closing of gaps.
*Provide data analysis and strategy execution across risk areas, leveraging an understanding of risk and regulation.
*Support cross-functional initiatives to deliver on risk goals, policies and procedures.
*Understand and support the Corporate Security risk strategies.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.