Director, Technology Risk

Overview

Director, Technology Risk leads the Second Line risk oversight for Mastercard’s digital asset strategy and operations. You’ll align BVNK risk activities with Mastercard standards, applying industry frameworks to digital assets, custody, blockchain, and third-party integrations. The role combines governance, control design, and independent challenge in a fast-moving integration environment. You’ll shape a Technology Risk Framework and drive risk-informed decision-making in a scale-driven payments context. This role offers high-impact work at the intersection of security, fintech, and innovation.

Responsibilities

• Lead the Second Line implementation of a Technology Control Framework aligned to Mastercard standards and digital asset contexts
• Coordinate continuous control monitoring with traditional testing and assurance
• Define risk taxonomy, assessment methods, control standards and governance for digital-asset tech and security
• Establish a 1LoD Control Library aligning with the Technology Control Framework
• Provide Second Line oversight of digital-asset infrastructure, including custody, wallet architectures, blockchain integrations, and third-party dependencies
• Assess new digital-asset products and integrations before launch and identify emerging risks
• Challenge First Line risk assessments, control design, and remediation plans with independent oversight
• Perform sample-based control validation on critical services and cloud/digital asset environments
• Support risk acceptance processes and track remediation commitments to governance
• Represent Technology Risk in governance forums and ensure alignment with risk appetite and frameworks
• Collaborate with InfoSec, Technology Risk, Compliance and Audit to avoid duplicated oversight

Key requirements

• Experience in technology risk, cyber risk, operational resilience, control assurance, or second-line oversight in regulated financial services or tech environments
• Knowledge of modern cloud hosted infrastructure (AWS/GCP)
• Experience with continuous control monitoring tools
• Ability to translate industry standards (UCF, CRI Profile, NIST CSF, ISO 27001, SOC, PCI DSS, RCSA, FAIR) into actionable frameworks
• Working knowledge of blockchain infrastructure, digital-asset custody models, wallet architectures, and related dependencies
• Understanding of cryptographic practices underpinning blockchain and digital assets
• Strong understanding of the Three Lines of Defense model and Second Line oversight
• Ability to influence cross-functionally and maintain independence from QA/testing
• Comfort working in high-growth, evolving environments with ambiguity

• Strong communication with senior stakeholders
• Independent challenge and judgment
• Collaborative team orientation while maintaining independence
• Technology risk frameworks (UCF, CRI Profile, NIST CSF, ISO 27001, SOC, PCI DSS, FAIR)
• Control design and governance for digital-asset tech
• Cryptographic risk management

…