Director, Technology Risk

About Mastercard and Role Overview

Mastercard connects economies and empowers individuals across more than 200 countries, offering secure and innovative digital payment solutions. As Director, Technology Risk, you will be responsible for independent second-line oversight of technology risks, focusing primarily on European markets, ensuring compliance with IT policies, controls, and regulatory requirements.

Key Responsibilities

• Deliver independent second-line reviews and validations of technology risk management activities, particularly regarding operational resilience and security risks tied to technological changes.
• Oversee key technology control areas such as change management, system availability, security access, and data protections; evaluate control design and operational effectiveness while identifying and escalating significant deficiencies.
• Manage documentation and tracking of technology risks, controls, and remediation efforts using approved Governance, Risk, and Compliance (GRC) tools.
• Support and assess security and resilience frameworks to ensure they address threats inherent to local market processes and products.
• Guide local technology teams in crafting market-specific policies and IT/security controls to mitigate exposure.
• Develop and maintain technology-focused risk metrics aligned with approved risk appetite and tolerance levels.
• Maintain and promote adoption of Technology Risk Standards across markets, ensuring alignment with Enterprise Risk Management (ERM) and Operational Risk & Control (ORC) frameworks.
• Establish and refresh documented local risk processes ensuring adoption of best practices.
• Represent the second line of defense risk function in governance forums and senior management meetings, providing evidence-based insights for decision-making.
• Oversee risk reporting effectiveness, with emphasis on technology risk, ensuring alignment with group-wide standards and timely risk remediation.
• Support regulatory examinations related to technology risk and controls, including reviewing and preparing submissions to regulatory bodies.

Candidate Profile

• Demonstrated experience working cross-functionally across global teams and managing stakeholders within diverse regulatory environments.
• Ability to handle multiple priorities and deliver outcomes in a dynamic, fast-paced environment.
• Background in formal second line of defense roles providing independent oversight without direct operational duties.
• A proactive, inquisitive approach with capacity to engage broadly while focusing on key responsibilities.
• Advocates for improvement in policies and procedures, identifying opportunities for continuous enhancement.
• Familiarity with enterprise risk and control frameworks such as ISO or NIST Cybersecurity Framework or similar international standards.
• Experience presenting and reporting to senior management and governance committees.
• Strong verbal and written communication skills.

Corporate Security Responsibilities

• Adhere strictly to Mastercard’s security policies and best practices.
• Maintain confidentiality and integrity of all accessed information.
• Promptly report any suspected information security breach or violation.
• Complete mandatory periodic security training according to Mastercard policies.