Director, Information Security Engineering

Mastercard Inc.; Malahide; On-site; EUR 150,000 - 190,000; Full time

Job summary

Mastercard Inc. is seeking a Director of Information Security Engineering to lead security architecture and governance for Core Payments.

The role focuses on aligning security design with business needs, managing risk, and guiding global security operations and integration across platforms. The ideal candidate has deep expertise in information security, cryptography, and security standards (ISO27001, PCI-DSS, NIST).

Qualifications

• Strong understanding of information security, risk and data privacy within the domain of digital commerce including practical experience, integration of different security technologies.
• Broad awareness of security operations concepts across delivery lifecycle.
• Security architecture advice for web-based environments and secure communications (mobile/web apps and services).
• Knowledge of ISO27001, PCI-DSS, NIST SP800-53, COBIT.
• Cryptography knowledge: encryption, hashing, key management, certificates, TLS.
• Experience with CI/CD and security in automated workflows.
• Security Operations and Integration in an enterprise environment.

Responsibilities

• Provide technical design and architecture advice to internal teams.
• Proactively align security solutions with business needs within Mastercard’s risk tolerance, scalable across programs.
• Cultivate relationships with business owners, end-users, customers, project managers, engineers and leadership.
• Leverage security expertise in security operations and technology.
• Define security requirements and guidelines for repeatable processes by global teams.
• Support strategy, standards and architecture for security in operations, architecture and program health.

Skills

Information security

Security architecture

Security operations

Cloud security

Risk management

Stakeholder management

Job description

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Director, Information Security Engineering

The Business Security Enablement Guild is looking for a Director - Information Security Engineer to join our team in support of Core Payments. The ideal candidate is passionate about cybersecurity policies and governance, highly motivated, analytical, experienced in cybersecurity, and knowledgeable in cloud service deployment.

In this role, you will:

• Provide technical design and architecture advice to internal teams
• Proactively work to find solutions that align with business needs while operating within Mastercard’s risk tolerance that are scalable and can be applied across multiple programs and platforms.
• Cultivate and maintain working relationships with variety of internal stakeholders, including business owners, end-users, customers, project managers, engineers, and senior leadership
• Leverage security experience and knowledge within the security operations and technology
• Define security requirements and guidelines to ensure repeatable processes are followed by global teams
• Assist in the strategy, standards, and architecture for the security aspects of the Security operation, architecture, and program health

All About You

The ideal candidate for this position should have:

• Strong understanding of information security, risk and data privacy within the domain of digital commerce including relevant practical experience, integration of different security technologies, and designing secure multi-domain solutions
• Demonstrate a broad awareness of security operations concepts and practices across all phases of the delivery lifecycle
• Experience providing security architecture advice for web-based network environments and secure communication, including mobile applications, web applications and web services
• Knowledge of relevant industry standards and guidelines such as ISO27001, PCI-DSS, NIST SP800-53, COBIT
• Knowledge and technical security experience in cryptography, including several of the following: encryption, hashing, key management, digital certificates, TLS
• Experience of continuous delivery/continuous integration processes and procedures including critical security considerations in automated workflows
• Strong knowledge of Security Operations and Integration in an enterprise environment

NICE Framework References

• National Initiative for Cybersecurity Education (NICE) competency proficiency levels of advanced to expert in the following areas (recommended no more than 6):
• Data Analysis
• Encryption
• Identity Management
• Intelligence Analysis
• Software Development
• Threat Analysis

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.