Consultant, Information Security Engineering

Who is Mastercard?

We are the global technology company behind the world's fastest payments processing network. We are a vehicle for commerce, a connection to financial systems for the previously excluded, a technology innovation lab, and the home of Priceless ®. We ensure every employee has the opportunity to be a part of something bigger and to change lives. We believe as our company grows, so should you. We believe in connecting everyone to endless, priceless possibilities.

Job Title

Consultant, Information Security Engineering

The Corporate Security Control Validation team is responsible for conducting security control effectiveness assessments and advisory support to continuously improve the control environment that ensures the availability, integrity and confidentiality of the Mastercard network, systems and applications. The Information Security Engineering Consultant will be responsible for:
•Evaluating the current control environment
•Identifying existing control gaps and participate in designing new controls
•Identifying improvement and automation opportunities
•Developing and implementing control testing scripts
•Developing metrics and reporting on control effectiveness
•Re-engineering existing controls to improve effectiveness and efficiency

•Plan, execute and document self-assessments and reviews of the control environment, including assessing risks, determining scope, executing test procedures, and reporting results
•Evaluate technical designs against legal, regulatory, operational and IT requirements
•Assess business and IT operating risks/controls and make recommendations for improvement
•Consult with management in determining action items required for resolution of control issues
•Develop a control monitoring program to identify opportunities for improvement
•Working with other teams within Corporate Security such as the Governance Risk and Compliance team to ensure controls are aligning with regulatory, customer and policy requirements

•Bachelor's degree with concentration in information technology or equivalent experience
•CISSP, CISA or other relevant certifications are a plus

•Strong knowledge of Information Security controls and related operations
•Working experience with *NIX, and Windows environments
•Working experience with enterprise databases such as Oracle, SQL Server, etc.
•Working experience with object oriented and functional programming languages such as C#, Java, JavaScript, Python,
•Working experience with system automation, CI/CD patterns and practices, PowerShell, bash, Windows CLI, etc.
•Experience in Access management a plus
•Experience in RACF and ACF2 a plus
•Advanced MS Office skills (primarily Excel, Access, and PowerPoint)
•Ability to communicate effectively (both oral and written) and develop solid working relationships across multiple levels and organization boundaries
•Previous experience in process improvements (e.g. Lean Six Sigma) with ability to meet project deliverables (e.g. PMP)

Mastercard is an inclusive Equal Employment Opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.​

Back to top