Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Analyst, Risk Management
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Overview:
The Senior Analyst, Risk Management position will support the risk management program within the Global Business Services Center (GBSC) HR functions. The role is responsible for assisting in identifying, assessing, mitigating, and monitoring operational risk across the organization. This senior analyst will work closely with cross-functional teams, leveraging risk methodologies and frameworks to advance organizational objectives.

Responsibilities:

• Operational Incident Management – Generate reports on incident trends and root causes for leadership review. Coordinate follow-up actions with operations teams to ensure the timely closure of incidents and escalate unresolved items as needed.
• Risk Register Management – Manage the organization’s risk register, ensuring accurate and up-to-date records of identified risks, mitigation actions, risk ownership, and control effectiveness.
• Audit Coordination – Support and coordinate requests from internal audit, external audit, technology risk management, SOX, and enterprise risk management teams.
• Risk Assurance – Conduct user testing for process documentation and maintain document recertification records. Test regulatory controls to ensure ongoing compliance. Identify process control gaps and work with process owners to document remediation plans.
• Access Management – Support quarterly access management reviews for systems used across HR functions. Ensure alignment to security policies and regulatory requirements.
• Training – Promote awareness of risk management practices by educating functions on risk identification and reporting procedures.
• Stakeholder Engagement – Partner with internal auditors and legal teams to support risk-related projects and initiatives.
• Business Continuity Planning – Partner with operations leaders to document and maintain BCPs to ensure the organization’s resilience during disruptions.

All About You:

• Knowledge of enterprise risk management frameworks and methodologies (e.g. COSO, three lines of defense)
• Experience in identifying, assessing, and mitigating risks within functional areas.
• Background in supporting a control validation strategy, including documenting control activities, executing testing procedures, analyzing results, and offering recommendations for future actions.
• Demonstrates effective verbal and written communication skills, adapting messages to suit different audiences and helping stakeholders understand key risk concepts.
• Able to develop and maintain strong relationships with key stakeholders to foster collaboration.
• Works effectively with some guidance, exhibiting the ability to handle tasks with minimal supervision
• Demonstrates ability to manage multiple tasks, prioritize effectively, and meet deadlines.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Responsibilities:

• Operational Incident Management – Generate reports on incident trends and root causes for leadership review. Coordinate follow-up actions with operations teams to ensure the timely closure of incidents and escalate unresolved items as needed.
• Risk Register Management – Manage the organization’s risk register, ensuring accurate and up-to-date records of identified risks, mitigation actions, risk ownership, and control effectiveness.
• Audit Coordination – Support and coordinate requests from internal audit, external audit, technology risk management, SOX, and enterprise risk management teams.
• Risk Assurance – Conduct user testing for process documentation and maintain document recertification records. Test regulatory controls to ensure ongoing compliance. Identify process control gaps and work with process owners to document remediation plans.
• Access Management – Support quarterly access management reviews for systems used across HR functions. Ensure alignment to security policies and regulatory requirements.
• Training – Promote awareness of risk management practices by educating functions on risk identification and reporting procedures.
• Stakeholder Engagement – Partner with internal auditors and legal teams to support risk-related projects and initiatives.
• Business Continuity Planning – Partner with operations leaders to document and maintain BCPs to ensure the organization’s resilience during disruptions

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines