Risk Tools Analyst

Job Description

In this position, you will: -Lead Mastercard s employment of a set of sensor tools to enhance our information security posture -Advise asset owners on how to most effectively address findings -Generate and track formal issues when required to escalate remediation -Alert senior management to any new findings presenting significant risk -Build executive-level products / scorecards that convey trends in findings and risk scores -Leverage your expertise on these sensor tools to advise managers of third party and supply chain risks on findings against external entities -Draft responses to regulators, customers, and other external stakeholders on Mastercard s security profile and specific findings reported by these types of tools -Manage user access to these tools -Maintain documentation of all related processes and procedures The ideal candidate for this position should be: -Experienced with subscription-based security assessment tools for vendor risk management (e.g. RiskRecon) -Knowledgeable of web security controls at a fairly technical level (e.g. CIS Benchmarks) -Professionally certified in networking or information security (e.g. CompTIA+) -Adept at recognizing control shortfalls with the most significant risk implications for the business -Familiar with RSA Archer or similar governance, risk, and compliance (GRC) tools -Comfortable working with and communicating to a wide range of stakeholders across technology and business functions, including senior executives, technology standard owners, auditors, and information security engineers -Effective at composing executive-level graphics and reports conveying trends -Able to influence and drive results cross-functionally This position aligns with National Initiative for Cybersecurity Education (NICE) competency proficiency levels of advanced to expert in the following areas: Data Management Legal, Government, and Jurisprudence Risk Management This Mastercard role shares Knowledge, Skills, and Abilities (KSAs) with the following related NICE work roles: Security Control Assessor Security Architect Information Systems Security Developer