Director, Operational Risk and Controls

MasterCard; Toronto; On-site; CAD 120,000 - 180,000; Full time

Job summary

Mastercard is seeking a Director of Operational Risk and Controls to lead the execution of their risk strategy and framework. This role involves managing operational risks, collaborating with stakeholders, and ensuring compliance with risk policies. The ideal candidate will have substantial experience in operational risk, audit, and internal controls, along with strong project management and communication skills.

Qualifications

• Significant experience in operational risk, audit, and internal controls.
• Knowledge of the payments industry and financial services preferred.
• Experience with technology/cybersecurity risk management preferred.

Responsibilities

• Deliver on operational risk and controls integration milestones.
• Lead and manage delivery of initiatives and projects within Recorded Future.
• Develop centralized reporting for risks, controls, and mitigations.

Skills

Operational Risk

Audit

Internal Controls

Project Management

Analytical Skills

Communication

Education

Bachelor’s degree in finance, risk management, business, or related field

Tools

GRC tools

Dashboarding tools (e.g., Archer, Tableau)

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart, and accessible. Our technology, innovation, partnerships, and networks combine to deliver a unique set of products and services that help people, businesses, and governments realize their greatest potential.

Title and Summary

Director, Operational Risk and Controls

Overview:
The Mastercard Risk team is hiring a Director of Operational Risk and Controls to support the execution of our strategy, framework, and program. This role will focus on Recorded Future and the alignment of operational risk and controls policies, standards, and practices. Reporting to the SVP of Operational Risk and Controls, the ideal candidate will have experience in Operational Risk, M&A integration, Risk and Control Self Assessments, and internal control audits within organizations.

The Director will execute the strategic direction, application, and optimization of the organization’s operational risk and control framework, primarily focusing on Recorded Future. The role involves assessing practices in line with Mastercard’s ORC policies, partnering with stakeholders to identify, assess, and manage operational risks related to processes and key business services.

Role:

1. Deliver on operational risk and controls integration milestones to embed the program within the organization.
2. Define approaches for gap assessments of operational risk policies and practices.
3. Engage with stakeholders to conduct gap analyses and develop improvement plans.
4. Lead and manage delivery of initiatives and projects within Recorded Future.
5. Collaborate on risks identified during due diligence, ensuring they are managed appropriately.
6. Partner with stakeholders to track and manage risk activities.
7. Develop centralized reporting for risks, controls, and mitigations for senior management.
8. Identify, assess, and prioritize operational risks and controls.
9. Support execution of RCSAs to address risks and vulnerabilities.
10. Evaluate and report on risk events and loss events.
11. Deliver educational sessions on operational risk and controls.
12. Stay current on risk management practices and external events.
13. Drive process improvements, efficiencies, and automation.
14. Work with business owners on monitoring controls using key metrics.
15. Foster a risk-aware culture through education and awareness.
16. Lead workshops and working groups on risk initiatives.

All About You:

• Significant experience in operational risk, audit, and internal controls.
• Bachelor’s degree in finance, risk management, business, or related field.
• Experience in post-close due diligence and risk management integration.
• Knowledge of the payments industry and financial services preferred.
• Experience with technology/cybersecurity risk management preferred.
• Audit experience in technology and non-technology areas.
• Ability to collaborate across departments.
• Strong process and project management skills.
• Proven success with RCSA and risk/control frameworks.
• Effective communicator (written, oral, presentation).
• Excellent analytical and problem-solving skills.
• Knowledge of GRC and dashboarding tools preferred (e.g., Archer, Tableau).

#SecuritySolutions

Mastercard is an inclusive, merit-based employer that considers applicants without regard to gender, race, ethnicity, disability, veteran status, or other protected characteristics. If accommodations are needed during the application or recruitment process, contact [e-mail].

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks come with inherent risks. Employees are responsible for information security by abiding by policies, ensuring confidentiality, reporting violations, and completing mandatory trainings.