Senior Risk Management & Assurance Lead

Mastercard; O’Fallon (MO); On-site; USD 109,000 - 180,000; Full time

Benefits offered by this job

Insurance (medical, dental, vision)

401k with company match

Paid time off

Flexible spending account

On-site fitness facilities

Tuition reimbursement

Jury duty leave

Holidays

Job summary

Mastercard seeks a Lead Risk Manager in the United States to oversee assurance programs, document data flows, and test control frameworks with auditors. The role requires independence, strong analytical skills, and proficiency in access management across platforms, applications, and databases.

Ideal candidates hold a bachelor’s in CS/IT or related field, plus experience with GDPR and major control frameworks. A high degree of communication, presentation, and stakeholder management is essential.

Qualifications

• Bachelor’s degree in computer science, information technology or related field.
• Experience with SOC1, SOC2, ISAE3402/3000, ISO27001 and GDPR.
• Strong interpersonal, communication and presentation skills.
• Analytical and data storytelling skills to drive change.
• Experience with Access Management (platforms, applications, DBs).

Responsibilities

• Supports assurance programs and builds control frameworks for certifications.
• Documents data flows using Data Flow Diagrams with application owners.
• Tests control frameworks with auditors to ensure objectives and risk management.
• Performs control assessments across operational and business areas.
• Tracks remediation and improves control design and effectiveness.
• Prepares reports on assurance objectives, controls and risk assessments.

Skills

Independence

Interpersonal skills

Communication

Presentation skills

Analytical skills

Data storytelling

Access Management

Education

Bachelor’s degree in computer science / information technology / related field

Tools

Data Flow Diagrams

SOC1/SOC2/ISAE/ISO27001/GDPR knowledge

Job description

Mastercard seeks a Lead Risk Manager in the United States to oversee assurance programs, document data flows, and test control frameworks with auditors. The role requires independence, strong analytical skills, and proficiency in access management across platforms, applications, and databases.

Ideal candidates hold a bachelor’s in CS/IT or related field, plus experience with GDPR and major control frameworks. A high degree of communication, presentation, and stakeholder management is essential.