Risk Tools Analyst

Lead Mastercard s employment of a set of sensor tools to enhance our information security posture
-Advise asset owners on how to most effectively address findings
-Generate and track formal issues when required to escalate remediation
-Alert senior management to any new findings presenting significant risk
-Build executive-level products / scorecards that convey trends in findings and risk scores
-Leverage your expertise on these sensor tools to advise managers of third party and supply chain risks on findings against external entities
-Draft responses to regulators, customers, and other external stakeholders on Mastercard s security profile and specific findings reported by these types of tools
-Manage user access to these tools
-Maintain documentation of all related processes and procedures

The ideal candidate for this position should be:

-Experienced with subscription-based security assessment tools for vendor risk management (e.g. RiskRecon)
-Knowledgeable of web security controls at a fairly technical level (e.g. CIS Benchmarks)
-Professionally certified in networking or information security (e.g. CompTIA+)
-Adept at recognizing control shortfalls with the most significant risk implications for the business
-Familiar with RSA Archer or similar governance, risk, and compliance (GRC) tools
-Comfortable working with and communicating to a wide range of stakeholders across technology and business functions, including senior executives, technology standard owners, auditors, and information security engineers
-Effective at composing executive-level graphics and reports conveying trends
-Able to influence and drive results cross-functionally

This position aligns with National Initiative for Cybersecurity Education (NICE) competency proficiency levels of advanced to expert in the following areas:

Data Management
Legal, Government, and Jurisprudence
Risk Management

This Mastercard role shares Knowledge, Skills, and Abilities (KSAs) with the following related NICE work roles:

Security Control Assessor
Security Architect
Information Systems Security Developer