VP, Technology Risk Management

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary VP, Technology Risk Management Overview The Technology Risk and Controls Governance (TR&CG) organization is a business enabler and industry leader in technology and security risk management practices, supported by a multidisciplinary team of technology, security, and risk professionals. Our mission is to exceed stakeholder expectations by providing enhanced visibility into technology risks, strengthening governance practices, and promoting a secure and resilient operational environment. Within TR&CG, the Technology Controls Governance (TCG) team is responsible for establishing and maturing technology controls, standards, risk management, and control testing practices across Mastercard's technology landscape. The TCG team is seeking a Vice President, Technology Risk Management to drive alignment across enterprise risk management, technology controls, standards, and testing functions within the first and second lines of defense. This individual will help shape and execute a unified multi-year strategy that enables consistent implementation and sustainable risk management practices across first-line technology organizations. Responsibilities • Lead the planning, execution, reporting, and continuous improvement of Mastercard's technology control testing methodology. • Align strategic and tactical objectives across TR&CG to ensure Technology Risk and Controls Management capabilities can be effectively implemented by any Mastercard organization that manages technology assets. • Develop and maintain risk-based testing methodologies, including testing frequencies, control inventories, testing priorities, and standardized approaches for integration entities such as mergers and acquisitions and directly regulated entities. • Serve as a strategic partner to business owners and stakeholders by providing guidance on control design, remediation, testing prioritization, and technology integration within existing frameworks to reduce risk exposure and strengthen control effectiveness. • Partner with Technology, Risk, Second Line of Defense, and Regulatory teams to continuously enhance testing processes through iterative feedback, align executive expectations, and drive complex cross-functional risk initiatives. • Assist in the standardization of control management practices for integration entities, including mergers and acquisitions and directly regulated entities, while managing variances from business-as-usual processes. • Establish and oversee the integration of controls into emerging technologies while streamlining testing procedures, evidence requirements, sampling methodologies, and scalable business processes. • Drive standardization, automation, AI, analytics, and process optimization to enhance control effectiveness, compliance, auditability, and operational efficiency. • Analyze federated testing priorities, identify opportunities for testing synergies, and develop executive reporting and presentations on program progress. • Provide guidance to First and Second Line of Defense stakeholders to inform testing decisions, connect control testing results to emerging risk themes, and communicate key insights to leadership and governance forums. • Develop and maintain consolidated reporting, metrics, and continuous maturity assessments to measure program effectiveness and support strategic decision-making. • Support audits, regulatory examinations, and assurance activities through clear