Lead Platform Engineering - Patch Management

Mastercard; Greater London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A global technology company is seeking a Lead Platform Engineer to spearhead initiatives in patch management, vulnerability management, and technical security testing. The role emphasizes strategic leadership, operational excellence, and driving continuous improvement in platform security. Candidates should have a proven track record in platform security initiatives, expertise in security tools like Qualys, and excellent stakeholder engagement skills. Join a dynamic team to enhance security and compliance across critical services.

Qualifications

• Track record of leading major security initiatives.
• Deep understanding of compliance standards such as PCI DSS.
• Ability to influence cross-functional team decisions.

Responsibilities

• Lead initiatives in patch and vulnerability management.
• Define strategic roadmaps for security initiatives.
• Engage with technical community on emerging trends.

Skills

Leading platform security initiatives

Expertise in Qualys and security frameworks

Process improvement and automation

Cross-functional team collaboration

Complex infrastructure problem resolution

Strategic presentation delivery

Tools

Qualys

Risk assessment methodologies

CIS benchmarks

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Lead Platform Engineering - Patch Management Overview. The Lead Platform Engineer will spearhead initiatives in Patch Management, Vulnerability Management, and Technical Security Testing (including internal vulnerability scanning using tools such as Qualys) across Mastercard NPP O&T Network platforms. This role is pivotal in safeguarding critical services, ensuring compliance with SLAs, and maintaining high availability standards. Beyond operational excellence, the position demands strategic leadership, driving innovation and continuous improvement in platform security, efficiency, and resilience.

Key Responsibilities

• Leadership & Strategy
  • Act as the primary authority and escalation point for patching, vulnerability management, and platform security posture.
  • Define and implement strategic roadmaps for security and maintenance initiatives, aligning with organisational goals.
  • Champion automation and process optimisation to enhance operational efficiency and reduce risk.
• Security Governance
  • Lead vulnerability risk assessments and remediation strategies across complex environments.
  • Oversee the planning and execution of system/platform updates to optimise security and compliance.
  • Ensure proactive participation in Security Incident Management, driving root cause analysis and long-term fixes.
• Stakeholder Engagement
  • Communicate effectively with senior stakeholders to raise awareness of vulnerabilities and mitigation plans.
  • Provide executive-level KPI reporting and insights on platform security posture.
• Technical Excellence
  • Maintain a holistic view of platform security, identifying risks, escalating concerns, and implementing robust control functions.
  • Deliver technical guidance and mentorship to engineering teams, ensuring consistent deployment of secure solutions.
• Thought Leadership
  • Engage with the broader technical community to anticipate emerging trends and recommend innovative solutions.
  • Represent the team in internal forums, delivering presentations and knowledge-sharing sessions.

Required Experience

• Proven track record of leading major platform security initiatives, including patch and vulnerability management at scale.
• Expertise in security tools and frameworks (e.g., Qualys, CIS benchmarks, risk assessment methodologies).
• Experience driving process improvements and automation for operational and financial impact.
• Strong ability to partner with cross-functional teams, influencing decisions and ensuring timely project delivery.
• Demonstrated success as a trusted advisor and go-to expert, resolving complex infrastructure issues.
• Skilled in creating and delivering strategic presentations for senior leadership and technical audiences.

Preferred Skills

• Deep understanding of network and platform architecture within regulated environments.
• Familiarity with compliance standards (PCI DSS, ISO 27001) and risk management frameworks.
• Excellent communication, leadership, and stakeholder management skills.

Corporate Security Responsibility

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.