Senior Analyst, Risk Management

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Analyst, Risk Management Senior Analyst, IT Risk Management – Individual Contributor Overview The Senior Analyst, IT Risk Management, will support our SOX Compliance program within the Finance Organization and will report into the US-based Manager, Risk Management. This position will primarily focus on scoping and evaluation of general and application IT controls. The Senior Analyst will be responsible for managing and executing various aspects of the program including IT scoping, delivery of the program, and reporting of results. The Senior Analyst will work closely with the US-based SOX team, worldwide IT departments, regional controllership, our shared services center, business owners, and our internal and external auditors, with the expectation of some overlap in the working hours. Requirements for this position include extensive knowledge of IT general and application controls, strong understanding of IT control frameworks (e.g., COBIT, NIST Cybersecurity, NIST SP 800-53, CIS/SANS Top 20), familiarity with SEC/PCAOB regulations, COSO and US GAAP, as well as the demonstrated ability to monitor an effective global risk-based IT control environment. • Are you looking to join a fast-paced, collaborative environment supporting a world class growing organization? • Do you have the ability to think strategically and execute a complex project? • Do you have a risk-based mindset? • Are you IT savvy? • Do you have the ability to drive change and improve awareness across the organization?

Job Description • Support the execution of various SOX program components, including IT scoping, IT risk assessment, training of stakeholders on IT control-related best practices, IT control testing and review, remediation recommendations, deficiency evaluations and reporting • Report to a US-based Manager, Risk Management • Assess and determine design effectiveness of internal controls • Experience covering multiple technology environments such as Mainframe, UNIX/Linux, Cloud and Windows environments • Work with business owners to address any potential control gaps that may require remediation • Partner with various business owners and IT teams including technology compliance, operations, development, and application support to provide expertise in assessing the design and effectiveness of IT controls • Liaise with regional finance and IT stakeholders as well as internal and external auditors • Ensure the delivery of high quality, timely work products • Continuously identify efficiencies in the SOX program and opportunities for optimization of the financial and operational processes and controls through interaction and partnership with management • Exhibit strong project management skills with the ability to hold self and others accountable to internal and external deadlines • Ability to effectively manage international time-zone differences in communication globally • Demonstrate the ability to exercise judgment and display a high standard of ethics and professionalism • Demonstrate exceptional communications skills, both written and verbal, with the ability to understand complexities of the business All About You • Bachelor Degree Accounting, Business, Management Information Systems or equivalent, a CPA/CA, CISA or similar certification required • Has a strong understanding of IT control concepts and framework such as COBIT, NIST Cybersecurity, NIST SP 800-53,