Strategic Risk & Compliance Lead

Mastercard Inc.; O’Fallon (MO); On-site; USD 109,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

401k with company match

Tuition Reimbursement

Paid Leave (16 weeks new parent leave;

On-site Fitness Facilities

Vacation & Personal Days

US Holidays

Job summary

Mastercard Inc. is seeking a Lead Risk Management professional in Missouri to support assurance programs, document data flows, and coordinate with auditors to assess controls and manage risk. You’ll drive remediation tracking and report progress to leadership and regulators.

The role requires independence, strong communication, and familiarity with control frameworks such as SOC1, SOC2, ISAE3402/3000, ISO27001, and GDPR. This position is based in the US with competitive compensation and benefits.

Qualifications

• Experience with control frameworks (SOC1, SOC2, ISAE3402/3000, ISO27001, GDPR).
• Strong ability to document data flows using Data Flow Diagrams.
• Experience with audits to test control frameworks and ensure objectives are met.

Responsibilities

• Support assurance program and build control frameworks for certifications.
• Engage with application owners to document data flows and controls.
• Test control frameworks with auditors and ensure risk is managed effectively.
• Perform control assessments across operations and business areas.
• Track remediation and improve design and operational effectiveness of controls.
• Report on assurance objectives, controls, and risk assessments.
• Develop and maintain reports and metrics for customers and regulators.

Skills

SOC1

SOC2

ISAE3402/3000

ISO27001

GDPR

Data flows

Education

Bachelor’s degree in computer science or IT

Job description

Mastercard Inc. is seeking a Lead Risk Management professional in Missouri to support assurance programs, document data flows, and coordinate with auditors to assess controls and manage risk. You’ll drive remediation tracking and report progress to leadership and regulators.

The role requires independence, strong communication, and familiarity with control frameworks such as SOC1, SOC2, ISAE3402/3000, ISO27001, and GDPR. This position is based in the US with competitive compensation and benefits.