Principal, Technology Standards & Risk Governance

Mastercard Inc.; Greater London; On-site; GBP 120,000 - 150,000; Full time

Job summary

Mastercard Inc. in London seeks a Principal, Technology Risk Analyst to provide strategic leadership across technology policies and standards.

You will lead policy reviews, stakeholder engagement, and governance strategy to strengthen standard ownership and regulatory alignment. The role requires hands-on risk leadership, cross‑functional collaboration with risk partners and senior stakeholders, and the ability to translate updates into clear reports for technology leadership and auditors.

Qualifications

• Bachelor's degree or equivalent in IT, risk management, governance, or related fields.
• Experience leading policy/standard governance and compliance testing.
• Ability to translate updates into clear reporting for leadership and auditors.

Responsibilities

• Lead annual reviews of technology policies with stakeholder engagement.
• Develop and deliver training aligned with Technology Policy.
• Lead annual reviews of technology standards within governance framework.
• Coordinate governance meetings and drive process improvements.
• Own tools supporting governance and coordinate updates.
• Respond to regulatory and audit obligations as primary contact.

Skills

Technology risk governance

Policy governance

Stakeholder management

Compliance monitoring

Risk-based control assessment

Cross-team collaboration

Regulatory liaison

Communication skills

Education

Bachelor’s degree in information technology or related field

Tools

SOC 1/2 framework

SOX controls

ISO 27000 family

ISAE 3000/3402

NIST framework

PCI standards

Job description

Mastercard Inc. in London seeks a Principal, Technology Risk Analyst to provide strategic leadership across technology policies and standards.

You will lead policy reviews, stakeholder engagement, and governance strategy to strengthen standard ownership and regulatory alignment. The role requires hands-on risk leadership, cross‑functional collaboration with risk partners and senior stakeholders, and the ability to translate updates into clear reports for technology leadership and auditors.