Director, Risk Management

at  MasterCard

Our Purpose
We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a
culture of inclusion
for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.
Title and Summary
Director, Risk Management
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Overview
The Commercial & New Payment Flows (CNPF) 1st line Risk Management function is a newly formed team covering a group of businesses pursuing strategically significant target payment flows for Mastercard. We are looking for a Risk Management Director to lead Technology Risk, Operational Resiliency, and Process/Risk/Control mapping (both Product and Technology) . The incumbent will be adopting & enhancing central risk management frameworks working in close collaboration with other 1st line and functional risk teams (e.g. Data Privacy, Information Security etc). This an exciting opportunity to be part of a group working at the heart of a dynamic, growing business.

Role:

• Identify, assess and articulate Technology risks working closely with front line teams, Information Security, Data Privacy, Vendor risk etc
• Work closely with Engineering stakeholders to determine pain points and conduct deep dive on complex risk based technology scenarios
• SME on Operational Resiliency for the business ensuring alignment with resiliency frameworks and best practices
• Conduct Process/Risk/Controls mapping on key areas (Product and Technology) while maintaining the controls inventory and framework
• Provide business stakeholders with expert risk advice on the risk management process and related activities such as issue/event management, incident response etc.
• Support First Line on technology metric development (i.e., KRIs) to ensure alignment and embedding of Mastercard’s Risk Appetite Framework
• Provide effective risk governance throughout the business by helping management to structure effective risk proposals and by administering risk committees at the senior and executive management levels

Competencies:

• Expert knowledge of technology risk management, Operational Resiliency and Process/Controls documentation with experience of working with diverse stakeholders
• Strong relationship management skills, with the ability to deal with multiple stakeholders in a way that meets diverse business needs
• Ability to develop technology metrics and dashboards for effective risk reporting
• Knowledge of key risks affecting the payments industry, particularly resiliency, technology, regulatory, legal and strategic risks
• Expert knowledge of Process, Risk and Controls mapping using tooling systems such as tableau
• Ability to work independently on risk projects and deep dive root cause analysis with senior stakeholders
• Familiarity with IBM Open Pages and Archer (not essential)

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Role:

• Identify, assess and articulate Technology risks working closely with front line teams, Information Security, Data Privacy, Vendor risk etc
• Work closely with Engineering stakeholders to determine pain points and conduct deep dive on complex risk based technology scenarios
• SME on Operational Resiliency for the business ensuring alignment with resiliency frameworks and best practices
• Conduct Process/Risk/Controls mapping on key areas (Product and Technology) while maintaining the controls inventory and framework
• Provide business stakeholders with expert risk advice on the risk management process and related activities such as issue/event management, incident response etc.
• Support First Line on technology metric development (i.e., KRIs) to ensure alignment and embedding of Mastercard’s Risk Appetite Framework
• Provide effective risk governance throughout the business by helping management to structure effective risk proposals and by administering risk committees at the senior and executive management level

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines