Global VP, Secure Software Supply Chain

Mastercard; O’Fallon (MO); On-site; USD 212,000 - 339,000; Full time

Job summary

Mastercard is seeking a Vice President of Software Supply Chain Security to lead global DevSecOps, platform engineering, and security automation across the organization’s software supply chain. The role ensures end-to-end protection for internal development, third‑party software, and cloud workloads within our payments ecosystem.

The VP will define strategy, govern SBOM and code provenance, embed security into workflows, and partner with Legal, TPRM, and Procurement to enforce secure development

Qualifications

• Leads Security, Platform/DevOps, or Software Engineering teams.
• Implements software supply chain controls across complex, multi-cloud and hybrid environments.
• Balances regulatory, security, and developer experience requirements at enterprise scale.

Responsibilities

• Define the Software Supply Chain Security Strategy aligned to Mastercard's mission, regulatory obligations, and risk appetite.
• Build and lead global DevSecOps, platform engineering, and security automation teams.
• Architect security for CI/CD pipelines, infrastructure-as-code, and automation platforms.
• Embed security controls into development workflows (SAST/DAST, SBOM, dependency scanning, secrets management).
• Establish governance for SBOM, artifact integrity, code provenance, and policy-as-code guardrails.
• Promote secure-by-default culture with secure component consumption, signing, building, and deployment.
• Partner with Vulnerability Management on end-to-end detection, remediation, and exposure management.
• Partner with DevOps on cloud strategy (AWS, Azure, GCP, or hybrid) for resilient infrastructure.
• Collaborate with Legal, TPRM, and Procurement to enforce secure development and incident SLAs.

Skills

Security leadership

DevSecOps

CI/CD security

Kubernetes security

OSS governance

Executive communication

Tools

Kubernetes

Job description

Mastercard is seeking a Vice President of Software Supply Chain Security to lead global DevSecOps, platform engineering, and security automation across the organization’s software supply chain. The role ensures end-to-end protection for internal development, third‑party software, and cloud workloads within our payments ecosystem.

The VP will define strategy, govern SBOM and code provenance, embed security into workflows, and partner with Legal, TPRM, and Procurement to enforce secure development