Director, Services Technology Risk

This is a fully remote position, open to applicants in California.

📋 Description

• Lead the identification and evaluation of technology and operational risks within Services.

• Develop the strategy, operating model, governance, and capabilities for risk identification, assessment, prioritization, monitoring, and management.

• Create and enhance standardized risk management practices, including risk registers, product risk assessments, RCSAs, risk acceptance, and escalation procedures.

• Modernize and expand risk identification and assessment through automation, analytics, and AI-driven capabilities.

• Maintain a comprehensive view of significant risks across Services products, platforms, and programs.

• Collaborate with Product and Engineering leaders to integrate risk management into business and technology processes.

• Provide risk assessment and judgment on significant and emerging cybersecurity, resilience, regulatory, operational, AI/ML, and generative AI risks.

• Establish governance for the acceptance and escalation of residual risk.

• Convert complex technology risks into business impacts, trade-offs, and actionable insights for leadership.

• Deliver Services leadership with an integrated perspective on risk profiles, exposures, trends, and areas requiring management attention.

• Collaborate with Engineering, Product, Security, Business, and enterprise risk functions to enhance risk management practices.

• Lead and nurture a team of technology risk professionals.

⛳️ Requirements

• Extensive experience in technology risk management, operational risk, information security risk, technology audit, technology controls, or a related field.

• Strong background in leading and advancing technology risk management practices across intricate products, platforms, and business settings.

• Experience in managing risk registers, conducting product risk assessments, Risk and Control Self-Assessments (RCSAs), and other risk identification and evaluation activities.

• Keen interest in automation, analytics, and AI-driven methods to modernize risk management.

• Solid understanding of cybersecurity, data protection, software development, cloud services, identity and access management, vulnerability management, change management, third-party risk, and operational resilience.

• Capability to comprehend complex technology architectures and translate technical risks into clear business impacts and decision-making points.

• Familiarity with regulatory expectations, data-residency requirements, NIST, ISO 27001, and COBIT standards.

• Strong business acumen and ability to assess risk, challenge assumptions, evaluate trade-offs, and provide actionable recommendations.

• Proven ability to influence senior stakeholders in Product, Engineering, Business, Security, and risk areas.

• Ability to develop practical and scalable operating models in complex or evolving environments.

• Demonstrated experience in leading, mentoring, and developing high-performing teams.

• Excellent written and verbal communication skills.

• Bachelor’s degree is required.

• Professional certifications such as CISA, CISSP, CRISC, CISM, or equivalent are preferred but not mandatory.

• Must adhere to Mastercard’s security policies and practices, safeguard information confidentiality and integrity, report any suspected security violations or breaches, and complete required security training.

🏝️ Benefits

• Potential for annual bonuses or commissions based on the role.

• Medical, prescription drug, dental, vision, disability, and life insurance coverage.

• Flexible spending account and health savings account options available.

• 16 weeks of leave for new parents.

• Up to 20 days of bereavement leave offered.

• 80 hours of Paid Sick and Safe Time provided.

• 25 days of vacation time annually.

• 5 personal days each year.

• 10 paid holidays recognized in the U.S. annually.

• 401k plan with a competitive company match.

• Deferred compensation available for eligible positions.

• Fitness reimbursement or access to on-site fitness facilities.

• Eligibility for tuition reimbursement.

• Mandatory security training required.

• Reasonable accommodations or assistance provided during the application or recruitment process.