Director, Technology Risk

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Director, Technology Risk Who is Mastercard? Mastercard is a global technology company in the payments sector. We power payments and provide products and services for individuals and industries all around the world. Our people, technology, data and brand provide the capabilities that drive our success. We believe in connecting people to priceless possibilities. As a company, we know that our success is driven by the skills, experience, integrity and mindset of the talent we hire. By building an inclusive, world-class culture, our employees have once-in-a-career opportunities to be a part of teams that have a greater impact on our community and our world. We invite you to join our team to find out how you too can start something priceless. Overview: The Digital Asset Risk & Compliance team is looking for a Director, Technology Risk to lead the Second Line build-out of technology and information security (InfoSec) risk oversight for Mastercard’s digital asset strategy, products and operations. The role will align BVNK’s First- and Second-Line approach with Mastercard’s Technology Risk and InfoSec standards, leveraging industry frameworks such as UCF, the CRI Profile, NIST CSF, ISO 27001, CSA Cloud Controls Matrix (CCM), SOC, PCI DSS, FAIR and RCSA, while incorporating considerations unique to digital assets such as custody models, blockchain infrastructure, smart-contract dependencies and third-party integrations. The role requires the ability to operate in a fast-moving integration environment, distinguish material technology risks from execution noise, and provide specialist oversight of digital-asset infrastructure with independent challenge of First Line risk assessments, control design and remediation. Role: Technology & InfoSec Risk Framework (2LoD Build-Out) • Lead the Second Line implementation and coordination of a Technology Control Framework aligned to Mastercard standards — leveraging UCF, the CRI Profile, NIST CSF, ISO 27001, SOC, PCI DSS, FAIR and RCSA — incorporating risks unique to digital asset environments, and aligned with BVNK’s First Line approach. • Support integration of continuous control monitoring (CCM) approaches and tools with more traditional control testing and assurance. • Define risk taxonomy, assessment methodology, control standards and governance routines specific to digital-asset technology and security risk. • Drive establishment of a 1LoD Control Library that aligns to the coordinated Technology Control Framework. • Connect technology risk assessments, control libraries, risk appetite, risk registers and governance reporting into a single, coherent oversight view, and align decision-making to Mastercard's Risk Appetite Framework, including risk objectives and measurable tolerances. Digital-Asset Infrastructure Oversight • Provide specialist Second Line oversight of digital-asset infrastructure, including custody architecture, wallet design (hot/cold/multi-sig), blockchain network integrations, node and validator operations, cloud hosting and third-party/vendor dependencies. • Maintain a current view of technology architecture, dependencies and risk exposures across Mastercard’s and BVNK’s digital-asset platforms. • Assess the technology and security implications of new dig