Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Manager Technology Risk Management

Overview 

Manager, Technology Risk Management 

Manage and support the 1st line Technology Risk Management function at MTS.

LOCATION: Pune (hybrid)

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. 

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mastercard Transaction Services (MTS) is the regulated legal entity within Mastercard that enables transaction services and related payment capabilities in line with applicable regulatory requirements. MTS retains regulatory accountability for its services, while Mastercard corporate functions and affiliated service providers deliver operational, technology and information security services under an oversight and assurance model. This structure requires strong governance, effective risk management, clear control ownership and ongoing evidence of regulatory compliance.

Role

This role supports the first line Technology Risk Management function for MTS, helping to operationalize the technology risk framework, coordinate regulatory and supervisory reporting, and provide assurance over technology, cyber and third-party risk obligations. 

The role works closely with MTS leadership, Mastercard corporate functions, Information Security, Technology, Compliance, Operational Resilience, Legal Entity Management and Internal Audit.

The ideal candidate is a proactive, outcomes-focused technology risk professional who can operate effectively in a regulated environment, build trusted relationships across functions, and translate complex technology and cyber risk matters into clear, actionable insights for management and governance forums.

What are we looking for

-Experience in technology risk management, information security, cyber risk, IT audit, operational resilience, regulatory compliance or a related field.
-Strong understanding of technology and cyber risk frameworks, controls, risk assessment methodologies and issue remediation processes.
-Experience supporting regulated financial services, payments, technology or operational resilience environments is preferred.
-Experience managing or participating in the RCSA process, ideally within a financial services, IT or payments context, including experience working in first- or second-line risk teams or within third-line Internal Audit functions in a financial services environment.
-Familiarity with regulatory requirements such as DORA,EBA ICT Guidelines, operational and security risk reporting, ICT risk management, third-party risk management and control effectiveness reporting.
-Ability to coordinate across multiple stakeholders, manage competing priorities and deliver high-quality outputs under regulatory or governance timelines.
-Strong analytical, written and verbal communication skills, with the ability to prepare concise reporting for senior management, committees, auditors and regulators.

Qualifications
-A bachelor's degree in technology, information security, computer science, risk management or a related discipline is preferred. Relevant professional experience will also be considered. 
-Professional certifications such as CRISC, CISSP, CISM, CISA are desirable.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.