Director – Operational Risk and Controls

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Director, Operational Risk and ControlsDirector, Operational Risk and Controls, Mastercard Risk

Overview:
The Mastercard Risk team is hiring a Director of Operational Risk and Controls to support the execution of our Operational Risk and Controls strategy, framework and program. This position will focus on Recorded Future and on the alignment of operational risk and controls policies, standards, and practices. This is a key role within the Operational Risk and Controls team reporting to the Senior Vice President, Operational Risk and Controls. The ideal candidate will have Operational Risk and M&A integration experience and has performed Risk and Control Self Assessments and internal control audits successfully within organizations.

The Director of Operational Risk and Controls is responsible for executing against the strategic direction, application and optimization of the organization’s operational risk and control framework. This role will primarily focus on Recorded Future and assess operational risk and controls practices in line with Mastercard’s ORC policy and standards. This director role partners with key stakeholders across the organization to ensure they identify, assess, and effectively manage and mitigate operational risk associated with processes and key business services all of which are foundational to delivering on strategic goals, objectives and core values.

Role:
• Deliver on Operational Risk and Controls integration plan milestones to enhance and further embed the program within the organization
• Define approach for performing gap assessment of operational risk policies and practices
• Engage with key stakeholders from the Mastercard and acquired entity and conduct a gap analysis on existing processes and policies. Create, communicate, and execute a plan to address identified areas of improvement and/or gaps.
• Lead and manage successful delivery of Operational Risk and Controls initiatives and projects within Recorded Future
• Collaborate with cross-functional workstream leads on risks identified during due diligence, ensuring they are being managed and mitigated in line with timelines and plans
• Partner with key stakeholders across Recorded Future to actively track and manage operational risk and controls related activities
• Develop approach for centralized reporting of operational risks, controls and mitigations for senior management updates and provide regular reporting to SVP, Operational Risk and Controls
• Drive efforts to identify, assess, and prioritize key operational risk and controls
• Partner with the business on executing operational risk and control self-assessments (e.g., RCSAs) to address potential risks and vulnerabilities for targeted areas of importance and key areas of risk
• Evaluate and assess Issue Management Framework and Guidelines and underlying practices at Recorded Future
• Gather, analyze and report on Recorded Future risk events and loss events and prompt further evaluation where deemed necessary
• Develop and deliver educational sessions on Operational Risk and Controls
• Stay current on risk management practices and external operational risk events
• Drive continuous improvements including process improvements, simplification projects, efficiencies, and automation in execution where possible
• Work with business owners to ensure proper monitoring and assessment of internal controls leveraging key metrics (e.g., KPIs, KRIs, KCIs)
• Foster a risk-aware business culture by delivering risk education and awareness
• Lead workshops and working groups on Operational Risk and Control initiatives where needed

All About You:
• Significant experience in Operational Risk, Audit, and Internal Controls
• Bachelor’s degree in finance, risk management, business, or a related field
• Demonstrated experience in post-close due diligence and integration in a risk management role
• Knowledge of the payments industry and financial services expertise desired
• Experience with Technology / Cybersecurity risk management practices and standards preferred
• External Audit and/or Internal Audit experience in both Technology and non-Technology areas
• Demonstrated ability to work collaboratively across departments
• Superior process and project management skills
• Proven success implementing RCSA and Risk and Control programs, frameworks or processes
•Articulate and highly effective communicator (written, oral, presentation)
•Excellent analytical, problem solving and critical thinking skills; Keen attention to detail
• Knowledge of GRC and Dashboarding tools preferred (e.g. Archer, Open Pages, Tableau etc.)Mastercard is an inclusive equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [email protected] and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.