Lead - Security Monitoring and Response

Lead - Security Monitoring and Response

**Our Purpose**

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team - one that makes better decisions, drives innovation and delivers better business results.

**Title and Summary**

Lead - Security Monitoring and Response

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Lead Analyst for Operational Resilience, reporting to the Director Operational

Mission First, People Always

As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.

By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.

Overview

The Enterprise Resilience Team is looking for an Operational Resilience Lead, to primarily support Operational Resilience across Mastercard (including Business Continuity (BCM), Crisis management (CM) and Technical Recovery (TR). In this role, you will:

- Partner with global Enterprise Resilience team to design and implement the Operational Resilience Service Resilience solution across Mastercard.
- Embed Operational Resilience Service Resilience as a program within the organisation, built off the foundation of the Enterprise Resilience Disciplines (OR BCM, CM, TR).
- Partner with global Enterprise Resilience staff to understand resilience and to guide Service Resilience standardisation where appropriate.
- Have a high level of understanding and comprehension of Operational Resilience Service Resilience regulation and guidelines, including but not limited to, the Bank of England (BoE) and EU DORA regulations.
- Have an awareness of other jurisdiction regulations, guidelines and proposals in relation to Operational Resilience Service Resilience (e.g., DORA).
- Implement the Enterprise Resilience Service Resilience program structure to align with relevant certification standards (ISO, NIS2, NIST, ITIL, ITSM).
- Partner with team members within the Resilience Planning (RP) function to support regulatory compliance for all jurisdictions in which this business entity operates.
- Perform Critical Service (CS) Service Resilience identification and analysis in line with all appropriate regulatory expectations.
- Assess (criticality) and clarify / confirm Impact Tolerance/ Maximum Tolerable Period of Disruption (MTPD) levels for those all Services deemed in scope.
- Partner with all appropriate Risk functions to ensure required attestations to regulators and other bodies are made in line with program framework and regulatory expectations.
- Ensuring Service Resilience capabilities of third parties are compliant with risk management mandates.
- Partner with the team's technology recovery contact to ensure system impact analysis, recovery plans and exercises are performed as designated by policy.
- Train business partners on the program's roles and responsibilities and ensure all staff within the entity are knowledgeable of our requirements.
- Build key business relationships within the entity and become a trusted partner to further embed a Service Resilience Business Continuity culture.
- Provides consultation to management and Identify opportunities to implement process improvements.

Experience & Qualifications:

- Practitioner level knowledge of Service Resilience and the developing global regulatory landscape.
- Practitioner level knowledge of ITSM and ITIL standards.
- Practitioner level knowledge of Service Resilience End to End (E2E) exercising and testing.
- Practitioner level of knowledge of Cyber Resilience.
- Excellent written and spoken English language communication skills are a core requirement.
- Discipline relevant bachelor's degree