Principal Information Security Engineer

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Principal Information Security Engineer

Overview
Mastercard is seeking an information security engineering leader to join our Business Security Enablement Guild within the Corporate Security team. The Business Security Enablement Guild is a powerful team of information security and Dev Sec Ops experts focused on helping Mastercard achieve its goals by ensuring security is at the heart of everything we do.

Role – Principal Information Security Engineer
· As the Lead Security Engineer you will be focusing on supporting the cutting edge Mastercard Open Banking program space.
· You will be the subject matter expert in application security to deliver tactical mentorship and strategic consulting. This includes building a security-focused culture, secure development best practices and application security awareness. You will provide context of the threat landscape and associated risk for the programs you protect to educate and advocate for security.
· As you partner with the program teams to apply Mastercard standards and security best practices, you will be an active and critical participant in design and implementation of internal and external open banking services. You will mentor others in these efforts (including creating user stories, secure code review, providing up-front and ongoing security consultation, reviewing and enabling testing efforts, etc.)
· You will proactively work to find solutions that align with business needs while operating within Mastercard’s risk tolerance that are scalable and can be applied across multiple programs and platforms. This requires the ability to collaborate with cross-functional teams and regularly articulate and communicate to diverse audiences and properly translates security and risk management terminology into business terms, and recommends alternative solutions to these stakeholders.
· As the Lead Security Engineer, you will also assist the Business Security Office in assessing the current threat landscape and business needs of the Open Banking program to identify, prioritize and solution risks. This includes examining systems and applications to understand the current security posture and advocating for security best-practices with engineering teams.

All about you
· Researches and evaluates tools and acquisition opportunities to support cross-domain needs
· IT experience with demonstrated thought-leadership, cross-functional influence and partnership demonstrated by a successful track record of enabling business through technical decisions
· Provides input into performance appraisal process for department employees and helps identify top technical talent
· Successful track record in building upon security domains such as identity access management program to keep up with the ever changing technology & security landscape
· Experience initiating and managing improvement in security domain areas (i.e. identity access management, cloud, containerization, APIs, etc.) by leveraging process metrics and customer feedback
· Proven ability to build collaborative working relationships with internal stakeholders at the global/regional or local level
· Expert understanding of software engineering concepts and methodologies
· Proactive and able to handle multiple high-priority demands while driving consistent results
· Highly driven with a ‘can do’ attitude yet a structured and pragmatic approach to execution
· Highly skilled in verbal and written communication skills with ability to precisely articulate problem space/opportunity
· Strong object-oriented design and development skills

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.