{"id":2980998,"url":"https://alion.io/job/mastercard-manager-technology-control-testing-services-technology-risk","title":"Manager, Technology Control Testing, Services Technology Risk","company":{"id":252,"name":"Mastercard","domain":"mastercard.com","url":"https://alion.io/company/mastercard","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":185,"ghost_share":0.027,"stale_share":0.4,"repost_share":0.092,"time_to_fill_p50_days":26,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":131000,"max":216000,"currency":"USD","period":"year","gross":null,"usd_annual":216000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-10-20T00:00:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T09:09:51Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Our Purpose\nMastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.\nTitle and Summary\nManager, Technology Control Testing, Services Technology RiskWho is Mastercard?Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.\nOur decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.\nOverview:\nThe Services Technology Risk team is looking for a Manager, Service Technology Risk professional, to help maintain secure, resilient, and trusted technology environments while enabling innovation and growth.\nThe ideal candidate is a practical, risk-focused leader who sees control testing as a source of insight, not a checklist exercise. They bring a continuous improvement mindset, using lessons learned and testing observations to make the program more efficient each cycle, and partnering with engineering teams to identify, assess, and advance opportunities to automate testing, including AI-enabled approaches, as the function matures and scales controls, and build secure, resilient technology solutions at scale. They view compliance and assurance not as a check-the-box exercise, but as an opportunity to strengthen engineering practices, improve control effectiveness, and enable the business to move faster with confidence.\nRole:\nThe Manager, Technology Control Testing will lead and build out the first-line technology control testing function within Services Technology Risk. This hands-on people leader will own the design and execution of a risk-based annual control testing plan across products and platforms in the Services organization, while managing and developing a direct report and overseeing consultant resources as scope requires.\nThis role is ideal for someone with deep experience executing end-to-end technology control testing across complex, multi-layered environments, who can clearly distinguish controls owned by a product from those inherited from shared platforms. The successful candidate will be comfortable performing testing directly while setting the methodology, standards, and quality bar for the function, applying sound judgment to scoping decisions, and communicating clearly with stakeholders and leadership on status, risks, and results.\nThe Manager, Technology Control Testing, Services Technology Risk will:\nBuild, own, and execute a risk-based annual control testing plan for products and platforms across the Services organization, reassessing the approach where shortcomings are identified and scaling it as scope grows year over year.\nLead, coach, and develop direct reports, including setting objectives, assigning and balancing work, managing performance, and reviewing testing work for quality and completeness.\nPerform hands-on, end-to-end technology control testing across complex environments, identifying and differentiating controls owned at the product level from those owned at the platform level.\nConduct control scoping using available risk data, indicators, and prior findings, and apply documented, judgment-based rationale to scoping decisions that account for resource capacity, level of effort, and request turnaround.\nIncorporate regulatory and data-residency requirements (e.g., in-country or on-soil data processing obligations) into test planning and execution to ensure proper coverage of the end-to-end control lifecycle.\nDevelop and maintain clear, repeatable test scripts for both Test of Design (TOD) and Test of Operating Effectiveness (TOE), establishing documentation standards for the function.\nCommunicate testing results, control gaps, and practical recommendations to stakeholders, building alignment on risk and remediation.\nPartner with the internal issue management team to raise and document issues in alignment with established issue management requirements.\nDetermine the appropriate points and timing for escalation, raising risks, blockers, and disputed results to leadership promptly.\nAccurately report testing status, blockers, and path to green to leadership and stakeholders.\nIdentify opportunities to automate testing throughout the testing cycle, perform feasibility assessments, and partner with engineering teams and leadership to present and advance automation approaches, including AI-enabled solutions.\nPromote a culture where control testing is viewed as a business enabler that strengthens resiliency, regulatory confidence, and customer trust.\nAll About You\nDeep expertise in technology risk management, technology audit, IT controls testing, information security, or related disciplines.\nExperience managing people, or demonstrated experience leading, coaching, and reviewing the work of others, including consultants or third-party resources.\nProven experience designing, executing, and maturing a risk-based control testing program or annual test plan.\nStrong hands-on experience performing Test of Design and Test of Operating Effectiveness, including writing test scripts and documenting workpapers and observations.\nStrong knowledge of technology controls across areas such as encryption configuration, logging and monitoring, software development lifecycle, change management, identity and access management, vulnerability management, and operational resiliency.\nAbility to understand complex, multi-layered technical architectures, including shared platforms and the products built on them, and to determine where control ownership sits.\nFamiliarity with regulatory expectations and data-residency requirements as they apply to technology controls, and with frameworks such as NIST, ISO 27001, and COBIT.\nSound judgment in scoping and prioritization, with the ability to explain and defend risk-based decisions under resource and timeline constraints.\nStrong interest in automation and AI, with experience identifying automation opportunities and partnering with engineering teams to deliver them.\nStrong verbal and written communication skills, with the ability to present status, issues, and recommendations to technical and non-technical audiences, including senior leadership.\nAbility to build trusted relationships and influence stakeholders across Engineering, Product, Security, and business teams.\nComfortable navigating ambiguity and building processes where none exist, with a strong sense of ownership and accountability.\nBachelor’s degree required.\n• Professional certifications such as CISA, CISSP, CRISC, or CIA preferred but not required.Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact  and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.\nCorporate Security Responsibility\nAll activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:\nAbide by Mastercard’s security policies and practices;\n\nEnsure the confidentiality and integrity of the information being accessed;\n\nReport any suspected information security violation or breach, and\n\nComplete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.\n\nIn line with Mastercard’s total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more. Mastercard benefits for interns generally include: 56 hours of Paid Sick and Safe Time; jury duty leave; and on-site fitness facilities in some locations.\n\nTHIS POSTING RELECTS ONE OR MORE CURRENT VACANCIES ON OUR TEAM, AND MASTERCARD INTENDS TO FILL THIS POSITION BY 01/18/2027. If the fill date has passed, Mastercard intends to fill this position as soon as possible.\n\nPay Ranges\nNew York City, New York: $131,000 - $216,000 USD","description_format":"text","description_chars":10170,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-21T07:02:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 110 · green card filings: 139","filings_12m":110,"filings_prev_12m":161,"green_card_filings_12m":139,"median_offered_wage_usd":137520,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.885,"p_room":1,"age_days":5,"expected_fill_days":26,"reasons":["conf:20","velocity","win:early","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":{"stated_usd_annual":216000,"is_top_pay":true},"html_url":"https://alion.io/job/mastercard-manager-technology-control-testing-services-technology-risk","json_url":"https://alion.io/job/mastercard-manager-technology-control-testing-services-technology-risk.json","meta":{"generated_at":"2026-10-25T20:08:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28533,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":252},"rest":"https://alion.io/mcp/rest/get_company?id=252"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmastercard-manager-technology-control-testing-services-technology-risk"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmastercard-manager-technology-control-testing-services-technology-risk"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmastercard-manager-technology-control-testing-services-technology-risk"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mastercard-manager-technology-control-testing-services-technology-risk\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmastercard-manager-technology-control-testing-services-technology-risk"}]}