> Markdown version of [/jobs/ext/2683135-senior-technology-risk-assurance-specialist-services-technology-risk](https://www.wearedevelopers.com/jobs/ext/2683135-senior-technology-risk-assurance-specialist-services-technology-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Technology Risk Assurance Specialist, Services Technology Risk

- **Company:** Mastercard
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $106,000.0 - $169,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Data Analysis, Big Data, Cloud Computing Security, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Identity and Access Management, Issue Tracking Systems, Information Technology Audit, PCI Data Security Standards, Software Engineering, Strategies of Testing, Software Vulnerability Management, Data Logging
- **Published:** September 2, 2026
- **Apply:** https://mastercard.wd1.myworkdayjobs.com/CorporateCareers/job/New-York-City-New-York/Senior-Technology-Risk-Assurance-Specialist--Services-Technology-Risk_R-289000

## About the Role

o Experience in technology risk management, technology audit, information security, compliance, internal controls, or related disciplines.
o Strong hands-on experience supporting or executing assurance activities across frameworks such as PCI DSS, SOC 1, SOC 2, ISO 27001, customer assurance programs, or regulatory examinations.
o Solid understanding of technology risk management principles and experience identifying, assessing, mitigating, monitoring, and reporting technology risks.
o Experience evaluating control design and operating effectiveness, performing control testing, documenting observations, and supporting remediation efforts.
o Strong knowledge of technology and security controls across areas such as identity and access management, change management, cloud security, software development lifecycle, encryption, logging and monitoring, vulnerability management, and operational resiliency.
o Ability to understand technical architectures and effectively discuss risks and controls with engineering, security, and operations teams.
o Familiarity with technology risk and security frameworks such as PCI DSS, ISO 27001, NIST, COBIT, SOC, and related industry standards.
o Demonstrated passion for automation, AI, analytics, and continuous improvement, with experience leveraging technology to improve risk management and assurance outcomes.
o Ability to analyze large data sets, identify trends, uncover systemic issues, and translate findings into actionable insights.
o Strong problem-solving skills with a practical and risk-based approach to decision-making.
o Comfortable navigating ambiguity and working independently while managing multiple priorities in a fast-paced environment.
o Strong verbal and written communication skills, with the ability to present complex technical and risk concepts to both technical and non-technical audiences.
o Ability to build trusted relationships and collaborate effectively across Engineering, Product, Security, Architecture, Operations, and business stakeholders.
o Curious, proactive, and self-motivated, with a strong sense of ownership and a desire to continuously learn and expand expertise.
o Passionate about helping teams build secure, resilient, well-controlled technology while enabling innovation and business growth.

## Description

Services Technology Risk empowers Mastercard to provide regulators, auditors, customers, and leadership with confidence in the effectiveness of our technology risk management, security, resiliency, and control practices. Our mission is to enable Services to innovate and grow securely by embedding risk management into how technology products are designed, delivered, operated, and governed. We help Services build and operate secure, resilient, and trusted technology by partnering with Engineering, Product, Security and Business teams to proactively identify and manage risk, strengthen controls, and modernize assurance activities.
We are a multidisciplinary team of technology risk, controls, and assurance professionals focused on building and maintaining a strong technology control environment across the Services Business Unit. We provide risk intelligence, insights, and analysis while streamlining and scaling assurance activities through automation, analytics, reusability, and self-service capabilities that reduce manual effort and increase confidence in control effectiveness.
As Services continues to scale, increasing technology complexity, evolving regulatory expectations, fragmented processes, and growing customer assurance demands create new risks and challenges. Our role is to help teams navigate these challenges by building practical, scalable risk management practices that support innovation while maintaining secure, resilient, and well-controlled technology environments., The Senior Technology Risk Analyst will serve as a key contributor within the Services Technology Risk team, helping drive assurance, control effectiveness, risk assessment, and continuous improvement activities across the Services technology landscape.
This role is ideal for someone who combines a strong foundation in technology risk and controls with hands-on assurance experience across frameworks such as PCI DSS, SOC 2, and ISO 27001. The successful candidate will be equally comfortable partnering with engineers to understand technical implementations, working with auditors and customers to demonstrate control effectiveness, and identifying opportunities to automate traditionally manual risk and assurance activities.
The ideal candidate is intellectually curious, collaborative, and passionate about leveraging data, analytics, AI, and automation to transform how risk management and assurance are performed. This individual will serve as a trusted advisor to stakeholders, helping teams understand risk, strengthen controls, and build secure, resilient technology solutions at scale. They view compliance and assurance not as a check-the-box exercise, but as an opportunity to strengthen engineering practices, improve control effectiveness, and enable the business to move faster with confidence.

The Senior Technology Risk Analyst, Services Technology Risk will:
o Execute technology control testing and assurance activities across Services programs, products, and platforms.
o Support PCI DSS, SOC 1, SOC 2, ISO 27001, customer assurance engagements, and internal and external audit activities.
o Perform control design and operating effectiveness assessments across key technology domains including access management, change management, cloud security, resiliency, and data protection.
o Conduct technology risk assessments to identify emerging risks, evaluate business impact, and support risk treatment and mitigation strategies.
o Partner with Engineering, Product, Security, Business Operations, and Architecture teams to identify control gaps and develop practical, risk-based remediation plans.
o Support audit readiness efforts, including evidence management, stakeholder coordination, issue tracking, and validation of remediation activities.
o Analyze risk, control, issue, and assurance data to identify trends, systemic weaknesses, and opportunities for process improvement.
o Drive improvements in risk and assurance processes through automation, analytics, AI-enabled solutions, and continuous monitoring capabilities.
o Support the development and enhancement of technology control libraries, testing methodologies, and reusable assurance artifacts.
o Translate regulatory, customer, and framework requirements into practical and scalable control solutions that engineering teams can effectively implement.
o Monitor and report on technology risk, compliance, and control health metrics, escalating issues and exceptions when appropriate.
o Promote a culture where risk management is viewed as a business enabler that supports innovation, resiliency, and customer trust., All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

 * Abide by Mastercard's security policies and practices;
 * Ensure the confidentiality and integrity of the information being accessed;
 * Report any suspected information security violation or breach, and
 * Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.


## Related Videos

- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)
- [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail)
- [The Innovation Formula: Fast Prototyping, Data Analysis, and Real User Insights](https://www.wearedevelopers.com/videos/1421-the-innovation-formula-fast-prototyping-data-analysis-and-real-user-insights)
- [Developers Communities in San Francisco - WeAreDevelopers LIVE from Corgi Cafe](https://www.wearedevelopers.com/videos/2144-developers-communities-in-san-francisco-wearedevelopers-live-from-corgi-cafe)

## Related Articles

- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)