Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Information Security Engineer
Lead Information Security Engineer
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Mission First, People Always
As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.
By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.
Overview
The Data Security team is focused on protecting Mastercard’s most critical asset—data—by establishing strong foundations in information classification and loss prevention and continuously improving our data security posture across enterprise, cloud, and hybrid environments.
This role will play a key part in advancing data security capabilities, including data classification, data loss prevention (DLP), data security posture management (DSPM), while partnering closely with privacy, risk, business, and technology teams.
Role
In this role, you will:
• Support and evolve enterprise data classification and protection standards, ensuring sensitive data is consistently identified, labeled, and handled appropriately
• Design, implement, and maintain DLP controls to detect, prevent, and respond to unauthorized data sharing or exposure across email, endpoints, collaboration tools, cloud services, and network channels
• Contribute to Data Security Posture Management (DSPM) efforts by helping discover where sensitive data resides, who has access to it, and whether it is properly protected
• Partner on data security governance activities, including policy alignment, exception handling, metrics, and continuous improvement initiatives
• Support audit and regulatory responses (e.g., evidence gathering, control mapping, and issue remediation) in collaboration with Risk, Privacy, and Corporate Security stakeholders
• Help define and track KPIs and KRIs to provide visibility into data security effectiveness, coverage, and risk trends
• Act as a strong cross functional partner, balancing security, compliance, and business enablement while supporting Mastercard’s Zero Trust data strategy
All About You
The ideal candidate for this position should have:
• Successful track record in identifying ways to modify the security program (data loss prevention) to keep up with the ever-changing technology & security landscape.
• Experience leading initiatives focused on enterprise data classification, DLP, and/or DSPM
• Familiarity with enterprise data security concepts, cloud and SaaS environments, and modern collaboration platforms
• Comfort working across audit, risk, privacy, and technology teams
• Strong written and verbal communication skills, with the ability to explain security concepts clearly to diverse audiences
• A mindset focused on outcomes, continuous improvement, and enabling the business securely
• Ability to design, govern and communicate controls, not just operate tools (with understanding of industry security standards: NIST Cybersecurity Framework, NIST SP 800 53 / 800 171, ISO/IEC 27001 & 27002, Zero Trust, and more)
Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks
comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
