Our Purpose

　　We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team - one that makes better decisions, drives innovation and delivers better business results.

　　Title and Summary

　　Cyber Security Risk Manager

　　Overview

　　Responsibility for championing cyber security and resilience risk, internally and at a senior management level in support of the UK Financial system.

　　Maintain and develop the enterprise-wide risk management framework within Vocalink Mastercard across the end-to-end business processes ensuring:

　　• Business owners identify and monitor all material risks and associated action plans;

　　• Independent assessment of the effectiveness of the control environment and application of the risk framework;

　　• Senior Management and Board visibility of the firm's material resilience, operational and business risks, ensuring they form part of the wider strategic and commercial decision making processes;

　　Role

　　• Accountable directly to the VP of Risk Management.

　　• Working in the second line of defense you will partner with the first line to develop balanced risk-taking within the organization by promoting positive behaviours and a culture of openness.

　　• Represent Cyber Security Risk at appropriate meetings and deputise for the VP Risk Management where required.

　　• Provide risk briefings to the CRO ensuring risks, issues and appetite breaches are monitored and escalated thoughtfully.

　　• Develop effective control frameworks based on industry best practices such as NIST, and ISO27001, which adapt to meet changing regulatory landscapes and technical environment changes e.g., Cloud hosting and migration, data sovereignty legislation etc.

　　• Liaise with and support the risk and control owners to resolve any questions, queries and problems relating to ISAE3000 and scheme requirements which may occur during the audit as well as in the pre and post audit stages.

　　All About You

　　• Knowledge of risk management principles and the interrelationships of 3LoD

　　• Enthusiastic about technology and Cyber Security including tracking industry trends

　　• Understanding of key technology frameworks and standards such as NIST

　　• Confidently develops trusted relationships with peers and senior stakeholders

　　• Able to work with minimal supervision

　　• Analytical and can work with data

　　• Able to plan and adapt quickly to changes in priorities

　　• Discretion and confidentiality is essential

　　• A strong command of the English language both written and verbal

　　Corporate Security Responsibility

　　All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

　　Abide by Mastercard's security policies and practices;Ensure the confidentiality and integrity of the information being accessed;Report any suspected information security violation or breach, andComplete all periodic mandatory security trainings in accordance with Mastercard's guidelines.