Manager Technology Risk Management

Manager Technology Risk Management Manager Technology Risk Management

Overview

Mastercard Transaction Services (MTS) is the regulated legal entity within Mastercard that enables transaction services and related payment capabilities in line with applicable regulatory requirements. MTS retains regulatory accountability for its services, while Mastercard corporate functions and affiliated service providers deliver operational, technology and information security services under an oversight and assurance model. This structure requires strong governance, effective risk management, clear control ownership and ongoing evidence of regulatory compliance.

Role

This role supports the first line Technology Risk Management function for MTS, helping to operationalize the technology risk framework, coordinate regulatory and supervisory reporting, and provide assurance over technology, cyber and third-party risk obligations.

The role works closely with MTS leadership, Mastercard corporate functions, Information Security, Technology, Compliance, Operational Resilience, Legal Entity Management and Internal Audit.

The ideal candidate is a proactive, outcomes-focused technology risk professional who can operate effectively in a regulated environment, build trusted relationships across functions, and translate complex technology and cyber risk matters into clear, actionable insights for management and governance forums.

All about you
Experience in technology risk management, information security, cyber risk, IT audit, operational resilience, regulatory compliance or a related field.
Strong understanding of technology and cyber risk frameworks, controls, risk assessment methodologies and issue remediation processes.
Experience supporting regulated financial services, payments, technology or operational resilience environments is preferred.
Experience managing or participating in the RCSA process, ideally within a financial services, IT or payments context, including experience working in first- or second-line risk teams or within third-line Internal Audit functions in a financial services environment.
Familiarity with regulatory expectations such as DORA,EBA ICT Guidelines, operational and security risk reporting, ICT risk management, third-party risk management and control effectiveness reporting.
Ability to coordinate across multiple stakeholders, manage competing priorities and deliver high-quality outputs under regulatory or governance timelines.
Strong analytical, written and verbal communication skills, with the ability to prepare concise reporting for senior management, committees, auditors and regulators.