Director Security Engineering for Blockchain and Digital Solutions

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Director Security Engineering for Blockchain and Digital Solutions

Overview
The Digital Solutions Security Engineering team is looking for a Director of Security Engineering to join our team in support of the Digital Solutions organisation. You will lead a team of security engineers and provide technical insight to drive the security roadmap for the Crypto Products and Solutions Blockchain Networks program, Prepaid Services, Cardholder Services and Payment Optimization programs. This will require close partnership with engineering, product, and global business teams to ensure our products meet the highest standards of security, compliance, and customer trust. You will influence architecture, guide security-by-design practices, and help shape the future of Mastercard’s payment capabilities.

In this role, you will:
• Manage a security engineering team, providing guidance for career growth, project support, performance and quality.
• Mature security engineering capability: clarifying procedures, building skills, improving consistency and facilitating scalability.
• Serve as a trusted advisor to engineering and business leaders across Cryptocurrency Blockchain Products and Digital Solutions programs.
• Provide and recommend optimal solutions to meet security and regulatory requirements in the design of new/enhanced systems.
• Lead comprehensive security reviews of new and existing technology solutions by following internal and industry standards and processes.
• Support program teams in managing security risks to an acceptable level, including reporting and analysis.
• Influence and implement security requirements, standards, and architectural patterns for large scale, cryptocurrency products including external industry guidance.
• Cultivate and maintain working relationships with variety of internal stakeholders, including business owners, end-users, customers, project managers, engineers, and senior leadership.

All About You
The ideal candidate has expertise in managing a team of information security engineers to provide clear guidance on the development of secure software products especially in the area of cryptocurrency. They are passionate about cybersecurity controls and governance, highly motivated, analytical, experienced in cybersecurity, and knowledgeable in application security.
• Demonstrated ability to lead technical security teams and make balanced engineering decisions for critical software products.
• Positive people leader with ability to develop the skills and experience of team members.
• Natural ability to negotiate with business stakeholders to balance risk with business opportunity, while ensuring ongoing compliance and regulatory needs are met.
• Strong communication skills to influence across the organisation and translate security and risk management terminology into business terms.
• Broad security engineering experience with a combination of technology expertise, business knowledge and risk awareness.
• Strong understanding of cryptography concepts e.g. symmetric/asymmetric encryption, hashing, digital signatures, including their application in blockchain technologies.
• Knowledge of blockchain security principles and ability to reflect them as security requirements.
• Knowledge of current security best practices, common exploits, and threat landscape for web-based security architecture to secure on-line transactions.
• Confidence providing technical guidance to team members for complex decisions including cryptography, network design, application security, data protection, identity and access management etc.
• Advanced knowledge of security protocols and standards, experience with software development and secure designs.
• Demonstrated experience working with risk based security and compliance frameworks, including SOC 2, PCI DSS, DORA, and the Cyber Risk Institute CRI profiles, or other relevant regulatory or industry standards.

NICE Framework References
US National Initiative for Cybersecurity Education (NICE) competency proficiency levels of advanced to expert in leadership, technical, professional and operational.
This Mastercard role shares KSAs with these related NICE work roles
• Systems Security Management (OG-WRL-014)
• Executive Cyber Leadership (OG-WRL-007)
• Cybersecurity Policy and Planning (OG-WRL-002)
• Software Security Assessment (DD-WRL-005)
• Security Control Assessment (OG-WRL-012)

Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.