Senior Analyst, Risk Management

Please attach a copy of your resume in English to expedite the screening process.

Overview:
The Senior Analyst, Risk Management position will support the risk management program within the Global Business Services Center (GBSC) HR functions. The role is responsible for assisting in identifying, assessing, mitigating, and monitoring operational risk across the organization. This senior analyst will work closely with cross-functional teams, leveraging risk methodologies and frameworks to advance organizational objectives.

Role:
• Operational Incident Management - Generate reports on incident trends and root causes for leadership review. Coordinate follow-up actions with operations teams to ensure the timely closure of incidents and escalate unresolved items as needed.
• Risk Register Management - Manage the organization's risk register, ensuring accurate and up-to-date records of identified risks, mitigation actions, risk ownership, and control effectiveness.
• Audit Coordination - Support and coordinate requests from internal audit, external audit, technology risk management, SOX, and enterprise risk management teams.
• Risk Assurance - Conduct user testing for process documentation and maintain document recertification records. Test regulatory controls to ensure ongoing compliance. Identify process control gaps and work with process owners to document remediation plans.
• Access Management - Support quarterly access management reviews for systems used across HR functions. Ensure alignment to security policies and regulatory requirements.
• Training - Promote awareness of risk management practices by educating functions on risk identification and reporting procedures.
• Stakeholder Engagement - Partner with internal auditors and legal teams to support risk-related projects and initiatives.
• Business Continuity Planning - Partner with operations leaders to document and maintain BCPs to ensure the organization's resilience during disruptions.

All About You:
• Must be fluent in English (verbal and written)
• Knowledge of enterprise risk management frameworks and methodologies (e.g. COSO, three lines of defense)
• Experience in identifying, assessing, and mitigating risks within functional areas.
• Background in supporting a control validation strategy, including documenting control activities, executing testing procedures, analyzing results, and offering recommendations for future actions.
• Demonstrates effective verbal and written communication skills, adapting messages to suit different audiences and helping stakeholders understand key risk concepts.
• Able to develop and maintain strong relationships with key stakeholders to foster collaboration.
• Works effectively with some guidance, exhibiting the ability to handle tasks with minimal supervision
• Demonstrates ability to manage multiple tasks, prioritize effectively, and meet deadlines.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.