Senior Analyst, Risk Management

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior Analyst, Risk Management

Senior Analyst, Controls and Issues Advisory – Information Security

Job Description Summary

Who is Mastercard

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realise their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Vocalink Limited (a Mastercard Company) is a technology-driven payment company with a unique position within the UK domestic payments industry. The services Vocalink offers to its customers in the United Kingdom account for 90% of salaries paid, nearly all benefit payments, all cheques cleared and the majority of ATM transactions.

Overview

The Senior Analyst, Controls and Issues Advisory – Information Security role within the newly formed Controls Office supports the processes to ensure Vocalink Limited’s operations are compliant with risk and information security policies, procedures and regulations, while also identifying and addressing any control weakness or issues. This involves analysing and supporting the implementation of controls, monitoring their effectiveness and providing recommendations for improvement.

The team is dedicated to ensuring that Vocalink’s services remains robust, secure, and seamless for 60+million citizens every day – in numbers, that is 11 billion transactions every year with a value of over £6 trillion.

We are seeking a talented information security risk and controls practitioner to support the continuous improvement of controls robustness, and to assist in the delivery of actions that are required to remediate identified issues.

The successful candidate will have a solid awareness of some of the key information security risk industry frameworks and supporting guidelines, such as NIST, COBIT, PCI DSS, ISO/IEC 27001 & 27002, ISAE3000, CBEST and Archer Technical Controls Standard (ATCS).

The Vocalink Senior Analyst, Controls and Issues Advisory, reports to the Director, Controls & Issues Advisory at Vocalink Limited.

Responsibilities

The role holder will support activities within the Controls Office function including:

• Analyse existing information security risk focussed controls, support in the identification of control gaps and provide controls and issues assistance to 1LOD functions in line with Vocalink Limited’s Enterprise Risk Management Framework
• Support the implementation of applicable procedures to enable effective 1LOD adoption of Vocalink’s control and Issue management policies and processes
• Assist in the management and maintenance of the information security risk focused Controls Library domains (L1-L3)
• Analyse proposed new controls or changes to existing controls in line with agreed processes and provide a view on the appropriateness of the proposals
• Assist with the completion of control effectiveness assessments
• Analyse and support the remediation of control deficiencies and provide issues triage and submission validation
• Undertake analysis of the information security control environment and make improvement recommendations
• Promote collaborative working relationships with stakeholders across the organisation
• Present and engage effectively with colleagues across Vocalink and Mastercard

Knowledge Skills and Experience

• A solid awareness of some of the relevant industry guidelines aimed at promoting information security risk best practice (such as NIST, COBIT, PCI DSS, ISO/IEC 27001 & 27002, ISAE3000, CBEST and Archer Technical Controls Standard (ATCS)
• Understanding of internal controls framework principles
• An understanding of key operational risk management principles and approaches
• Experience of working in or advising functions on controls and issues management
• Experience in supporting Risk and Controls Self-Assessment (RCSA) processes, ideally in a banking, financial services, IT or payments context.
• An understanding of key operational resilience principles
• Experience of working in 1st or 2nd line risk teams or