Director Security Engineering for Blockchain and Digital Solutions

Mastercard; Greater London; On-site; GBP 150,000 - 200,000; Full time

Job summary

Mastercard is seeking a Director of Security Engineering to lead the security engineering team for blockchain and digital solutions. You will drive the security roadmap for crypto products and blockchain networks, working with engineering, product, and global business teams to ensure top security standards and regulatory compliance.

You will influence architecture and secure-by-design practices, guiding risk mitigation and security reviews across new and existing solutions while collaborating

Qualifications

• Proven leadership of security engineering teams.
• Strong background in cryptography concepts and blockchain security.
• Experience with security governance and regulatory compliance.

Responsibilities

• Manage a security engineering team, guiding career growth and performance.
• Mature security engineering capabilities and scalable processes.
• Advise engineering and business leaders across cryptocurrency blockchain products and digital solutions.
• Recommend security designs meeting regulatory requirements for new/enhanced systems.
• Lead security reviews of new and existing tech solutions per internal/industry standards.
• Support programs in managing security risks to an acceptable level with reporting and analysis.
• Influence security requirements and architectural patterns for large-scale crypto products.
• Maintain relationships with stakeholders across the organization.

Skills

Leadership

Cryptography

Blockchain security

Cybersecurity governance

Risk management

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title And Summary

Director Security Engineering for Blockchain and Digital Solutions

Overview

The Digital Solutions Security Engineering team is looking for a Director of Security Engineering to join our team in support of the Digital Solutions organisation. You will lead a team of security engineers and provide technical insight to drive the security roadmap for the Crypto Products and Solutions Blockchain Networks program, Prepaid Services, Cardholder Services and Payment Optimization programs. This will require close partnership with engineering, product, and global business teams to ensure our products meet the highest standards of security, compliance, and customer trust. You will influence architecture, guide security-by-design practices, and help shape the future of Mastercard’s payment capabilities.

In This Role, You Will:

• Manage a security engineering team, providing guidance for career growth, project support, performance and quality.
• Mature security engineering capability: clarifying procedures, building skills, improving consistency and facilitating scalability.
• Serve as a trusted advisor to engineering and business leaders across Cryptocurrency Blockchain Products and Digital Solutions programs.
• Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems.
• Lead comprehensive security reviews of new and existing technology solutions by following internal and industry standards and processes.
• Support program teams in managing security risks to an acceptable level, including reporting and analysis.
• Influence and implement security requirements, standards, and architectural patterns for large scale, cryptocurrency products including external industry guidance.
• Cultivate and maintain working relationships with variety of internal stakeholders, including business owners, end-users, customers, project managers, engineers, and senior leadership.

All About You

The ideal candidate has expertise in managing a team of information security engineers to provide clear guidance on the development of secure software products especially in the area of cryptocurrency. They are passionate about cybersecurity controls and governance, highly motivated, analytical, experienced in cybersecurity, and knowledgeable in application security.

• Demonstrated ability to lead technical security teams and make balanced engineering decisions for critical software products.
• Positive people leader with ability to develop the skills and experience of team members.
• Natural ability to negotiate with business stakeholders to balance risk with business opportunity, while ensuring ongoing compliance and regulatory needs are met.
• Strong communication skills to influence across the organisation and translate security and risk management terminology into business terms.
• Broad security engineering experience with a combination of technology expertise, business knowledge and risk awareness.
• Strong understanding of cryptography concepts e.g. symmetric/asymmetric encryption, hashing, digital signatures, including their application in blockchain technologies.
• Knowledge of blockchain security principles and ability to reflect them as security requirements.
• Knowledge of current security best practices, common exploits, and threat landscape for web-based security architecture to secure on-line transactions.
• Confidence providing technical guidance to team members for complex decisions including cryptography, network design, application security, data protection, identity and access management etc.
• Advanced knowledge of security protocols and standards, experience with software development and secure designs.
• Demonstrated experience working with risk based security and compliance frameworks, including SOC 2, PCI DSS, DORA, and the Cyber Risk Institute CRI profiles, or other relevant regulatory or industry standards.

NICE Framework References

US National Initiative for Cybersecurity Education (NICE) competency proficiency levelsof advanced to expert in leadership, technical, professional and operational.

This Mastercard role shares KSAs with these related NICE work roles.

• Systems Security Management (OG-WRL-014)
• Executive Cyber Leadership (OG-WRL-007)
• Cybersecurity Policy and Planning (OG-WRL-002)
• Software Security Assessment (DD-WRL-005)
• Security Control Assessment (OG-WRL-012)

Corporate Security Responsibility

Every Person Working For, Or On Behalf Of, Mastercard Is Responsible For Information Security. All Activities Involving Access To Mastercard Assets, Information, And Networks Comes With An Inherent Risk To The Organization And Therefore, It Is Expected That The Successful Candidate For This Position Must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Corporate Security Responsibility

Every Person Working For, Or On Behalf Of, Mastercard Is Responsible For Information Security And Must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.