Lead Technology Risk Analyst

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Lead Technology Risk Analyst

Overview

The Lead Technology Risk Analyst within the Program Controls, Operations & Modernization (ProCOM) Office is responsible for leading the implementation and execution of technology risk management, governance, controls, and operational resilience programs across Mastercard's technology organization. This role partners closely with technology, product, engineering, security, and business teams to identify, assess, monitor, and mitigate technology risks while strengthening control effectiveness and operational maturity.

The position serves as a key leader in advancing ProCOM's mission to deliver scalable governance, risk management, production readiness, and operational excellence capabilities. Through risk assessments, governance oversight, control monitoring, operational intelligence, and continuous improvement initiatives, this role helps ensure technology products and platforms are delivered with resiliency, reliability, and compliance while enabling informed risk-based decision making. The Lead, Technology Risk Manager plays a critical role in translating strategic risk objectives into actionable programs, measurable outcomes, and sustainable operational practices.

Role

• Lead the execution of technology risk management programs and initiatives across products, platforms, services, and technology domains.

• Facilitate technology risk identification, assessment, treatment, monitoring, and escalation processes to ensure risks are proactively managed and appropriately governed.

• Drive adoption of technology risk frameworks, policies, standards, and procedures across engineering and technology teams.

• Partner with product, engineering, operations, security, and risk stakeholders to evaluate control effectiveness and identify opportunities to strengthen operational resilience.

• Lead risk assessments, control reviews, operational readiness evaluations, and governance activities supporting strategic initiatives and technology changes.

• Monitor technology risk indicators, control metrics, issue remediation activities, and operational performance trends to identify emerging risks and systemic concerns.

• Develop executive-ready reporting, risk summaries, governance materials, and operational insights that support leadership decision-making.

• Coordinate technology risk governance forums and ensure action items, decisions, and risk mitigation activities are appropriately tracked and executed.

• Support audit, regulatory, compliance, and assurance activities by coordinating evidence collection, remediation planning, and stakeholder engagement.

• Identify recurring operational issues, control gaps, and process weaknesses and lead initiatives to improve risk management effectiveness.

• Drive automation and process improvements that reduce manual effort, enhance governance capabilities, and improve data quality and reporting accuracy.

• Leverage operational and risk data to develop meaningful insights, trends, and recommendations that support proactive risk management.

• Provide guidance and subject matter expertise to stakeholders on technology risk, governance, resilience, and control practices.

• Mentor and support team members while fostering a culture of accountability, collaboration, continuous improvement, and operational excellence.

All About You

• Experience in technology risk management, operational risk, governance, controls, cybersecurity, audit, compliance, technology operations, or related disciplines.

• Strong understanding of technology risk frameworks, risk assessment methodologies, control environments, and operational resilience principles.

• Demonstrated ability to identify, assess, and communicate technology and operational risks in a clear and business-focused manner.

• Experience leading risk assessments, control reviews, issue management activities, governance processes, and remediation efforts.

• Strong analytical and problem-solving skills with the ability to evaluate complex operational and technical situations and recommend practical solutions.

• Experience developing executive-level reporting, governance materials, dashboards, and risk intelligence presentations.

• Ability to analyze operational, risk, and performance data to identify trends, emerging risks, and opportunities for improvement.

• Strong stakeholder management skills with the ability to influence and collaborate effectively across business, technology, product, and control functions.

• Knowledge of regulatory expectations, audit practices, operational resilience frameworks, and technology governance principles.

• Experience driving process improvement, workflow optimization, automation, and modernization initiatives.

• Excellent written and verbal communication skills with the ability to translate complex technical and risk concepts into meaningful business insights.

• Demonstrated ability to manage multiple priorities, operate independently, and deliver results in a fast-paced environment.

• Passion for continuous improvement, operational excellence, and building scalable risk and governance capabilities.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.