Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Manager, Technology Control Testing, Services Technology Risk role.
Rezi rewrites your resume against Mastercard's job description. Free.

Tailor your resume to this Manager, Technology Control Testing, Services Technology Risk role.
Rezi rewrites your resume against Mastercard's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Manager, Technology Control Testing, Services Technology Risk posting at Mastercard — free, in seconds.

Don't guess if your resume is good enough.
See how it scores against the Manager, Technology Control Testing, Services Technology Risk posting at Mastercard — free, in seconds.
About the Role
The Services Technology Risk team is seeking a Manager, Service Technology Risk professional to help maintain secure, resilient, and trusted technology environments while enabling innovation and growth. This role involves leading and building out the first-line technology control testing function within Services Technology Risk, owning the design and execution of a risk-based annual control testing plan, and managing a direct report and consultant resources.
Responsibilities
- Build, own, and execute a risk-based annual control testing plan for products and platforms across the Services organization.
- Reassess the approach where shortcomings are identified and scale it as scope grows year over year.
- Lead, coach, and develop direct reports, including setting objectives, assigning and balancing work, managing performance, and reviewing testing work for quality and completeness.
- Perform hands-on, end-to-end technology control testing across complex environments, identifying and differentiating controls owned at the product level from those owned at the platform level.
- Conduct control scoping using available risk data, indicators, and prior findings, and apply documented, judgment-based rationale to scoping decisions.
- Incorporate regulatory and data-residency requirements into test planning and execution.
- Develop and maintain clear, repeatable test scripts for both Test of Design (TOD) and Test of Operating Effectiveness (TOE), establishing documentation standards for the function.
- Communicate testing results, control gaps, and practical recommendations to stakeholders, building alignment on risk and remediation.
- Partner with the internal issue management team to raise and document issues.
- Determine the appropriate points and timing for escalation, raising risks, blockers, and disputed results to leadership promptly.
- Accurately report testing status, blockers, and path to green to leadership and stakeholders.
- Identify opportunities to automate testing throughout the testing cycle, perform feasibility assessments, and partner with engineering teams and leadership to present and advance automation approaches, including AI-enabled solutions.
- Promote a culture where control testing is viewed as a business enabler that strengthens resiliency, regulatory confidence, and customer trust.
Requirements
- Deep expertise in technology risk management, technology audit, IT controls testing, information security, or related disciplines.
- Experience managing people, or demonstrated experience leading, coaching, and reviewing the work of others, including consultants or third-party resources.
- Proven experience designing, executing, and maturing a risk-based control testing program or annual test plan.
- Strong hands-on experience performing Test of Design and Test of Operating Effectiveness, including writing test scripts and documenting workpapers and observations.
- Strong knowledge of technology controls across areas such as encryption configuration, logging and monitoring, software development lifecycle, change management, identity and access management, vulnerability management, and operational resiliency.
- Ability to understand complex, multi-layered technical architectures, including shared platforms and the products built on them, and to determine where control ownership sits.
- Familiarity with regulatory expectations and data-residency requirements as they apply to technology controls, and with frameworks such as NIST, ISO 27001, and COBIT.
- Sound judgment in scoping and prioritization, with the ability to explain and defend risk-based decisions under resource and timeline constraints.
- Strong interest in automation and AI, with experience identifying automation opportunities and partnering with engineering teams to deliver them.
- Strong verbal and written communication skills, with the ability to present status, issues, and recommendations to technical and non-technical audiences, including senior leadership.
- Ability to build trusted relationships and influence stakeholders across Engineering, Product, Security, and business teams.
- Comfortable navigating ambiguity and building processes where none exist, with a strong sense of ownership and accountability.
- Bachelor's degree required.
- Abide by Mastercard's security policies and practices.
- Ensure the confidentiality and integrity of the information being accessed.
- Report any suspected information security violation or breach.
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Skills
- Technology risk management
- Technology audit
- IT controls testing
- Information security
- Test of Design (TOD)
- Test of Operating Effectiveness (TOE)
- Risk-based control testing
- Automation
- AI
Location
- New York City, New York
Work Type
- Full-time
Experience Level
- Manager
Education Level
- Bachelor's degree required
- Professional certifications such as CISA, CISSP, CRISC, or CIA preferred but not required
Salary/Compensations
- $131,000 - $216,000 USD
Benefits
- Insurance (including medical, prescription drug, dental, vision, disability, life insurance)
- Flexible spending account and health savings account
- Paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave)
- 80 hours of Paid Sick and Safe Time
- 25 days of vacation time
- 5 personal days
- 10 annual paid U.S. observed holidays
- 401k with a best-in-class company match
- Deferred compensation for eligible roles
- Fitness reimbursement or on-site fitness facilities
- Eligibility for tuition reimbursement
About the Company
- Mastercard powers economies and empowers people in 200+ countries and territories worldwide.
- Together with our customers, we're helping build a sustainable economy where everyone can prosper.
- We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible.
- Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
- Mastercard is a global technology company in the payments industry.
- Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible.
- Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
- Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company.
- With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Equal Opportunity
- Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.
- We hire the most qualified candidate for the role.
- In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting.
- Do not include any medical or health information in this email.
- The Reasonable Accommodations team will respond to your email promptly.