Description
Our Purpose
We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.
Title and Summary
TRM Governance & Assurance OverviewTechnology Risk Management (TRM) is a key component of Mastercard's three lines of defense model. Within TRM, the TECH Risk Governance function is responsible for the development and integration of first-line Technology with enterprise-side risk frameworks and related governance mechanisms.
This role, reporting to the VP, Technology Risk Management Governance will manage and oversee the design and operation of Technology governance, its alignment to the enterprise frameworks and deliver 1LOD assurance reviews across the enterprise to support Tech teams alignment with Mastercard and industry requirements.
Role
The key responsibilities of this role include:
Evolving the design and maintaining oversight of the 1LOD governance framework, and alignment of the relevant enterprise requirements for risk committees, policy & standards, risk reporting and assurance reviews.
Working with 1LOD and 2LOD stakeholders across the enterprise to perform targeted reviews to ensure the technology risk framework is operating effectively and providing senior management with accurate and timely risk data.
Engage across the enterprise to build relationships with stakeholders providing guidance on governance responsibilities, risk reporting and assurance.
Implementing reviews and maintaining oversight of the TRM and 1LOD risk teams' compliance with governance, control, and GRC systems requirements.
Working across all businesses and geographies to provide risk teams and control owners with guidance on governance requirements.
Collaborate across the three lines of defense to provide an integrated plan of assurance reporting to the Technology Risk committee.
All About You
The ideal candidate for the role will:
Be an experienced risk manager with relevant technology risk governance and assurance experience in multinational companies
Demonstrate detailed knowledge of industry risk and control frameworks (ITIL; PCI; CIS; NIST), regulatory requirements and have a track record of design and delivery of technology risk and control assurance reviews
Be experienced in working on cross-functional and large projects with globally dispersed resources
Know how to manage senior stakeholder relationships and navigate divergent opinions to deliver results
Have excellent verbal and written communication skills
Technology Risk and Security certifications preferred (CRISC, IRM etc)
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard's security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Apply on company website