# Manager, Technology Control Testing, Services Technology Risk **Company**: Mastercard **Location**: New York City, New York **Experience**: senior **Job type**: full-time **Salary**: $131,000 - $216,000 USD **Category**: IT **Industry**: Technology **Apply**: https://mastercard.wd1.myworkdayjobs.com/en-US/CorporateCareers/job/New-York-City-New-York/Manager--Technology-Control-Testing--Services-Technology-Risk_R-294203?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_d25b138c-bb9 ## Description Mastercard is seeking a Manager, Technology Control Testing, Services Technology Risk to lead and build out the first-line technology control testing function within Services Technology Risk. The ideal candidate is a practical, risk-focused leader who sees control testing as a source of insight, not a checklist exercise. They bring a continuous improvement mindset, using lessons learned and testing observations to make the program more efficient each cycle, and partnering with engineering teams to identify, assess, and advance opportunities to automate testing, including AI-enabled approaches. Responsibilities: - Build, own, and execute a risk-based annual control testing plan for products and platforms across the Services organization - Lead, coach, and develop direct reports, including setting objectives, assigning and balancing work, managing performance, and reviewing testing work for quality and completeness - Perform hands-on, end-to-end technology control testing across complex environments, identifying and differentiating controls owned at the product level from those owned at the platform level - Conduct control scoping using available risk data, indicators, and prior findings, and apply documented, judgment-based rationale to scoping decisions - Incorporate regulatory and data-residency requirements into test planning and execution to ensure proper coverage of the end-to-end control lifecycle - Develop and maintain clear, repeatable test scripts for both Test of Design (TOD) and Test of Operating Effectiveness (TOE) - Communicate testing results, control gaps, and practical recommendations to stakeholders - Partner with the internal issue management team to raise and document issues in alignment with established issue management requirements - Determine the appropriate points and timing for escalation, raising risks, blockers, and disputed results to leadership promptly - Accurately report testing status, blockers, and path to green to leadership and stakeholders - Identify opportunities to automate testing throughout the testing cycle, perform feasibility assessments, and partner with engineering teams and leadership to present and advance automation approaches - Promote a culture where control testing is viewed as a business enabler that strengthens resiliency, regulatory confidence, and customer trust Requirements: - Deep expertise in technology risk management, technology audit, IT controls testing, information security, or related disciplines - Experience managing people, or demonstrated experience leading, coaching, and reviewing the work of others - Proven experience designing, executing, and maturing a risk-based control testing program or annual test plan - Strong hands-on experience performing Test of Design and Test of Operating Effectiveness - Strong knowledge of technology controls across areas such as encryption configuration, logging and monitoring, software development lifecycle, change management, identity and access management, vulnerability management, and operational resiliency - Ability to understand complex, multi-layered technical architectures - Familiarity with regulatory expectations and data-residency requirements as they apply to technology controls - Sound judgment in scoping and prioritization, with the ability to explain and defend risk-based decisions under resource and timeline constraints - Strong interest in automation and AI, with experience identifying automation opportunities and partnering with engineering teams to deliver them - Strong verbal and written communication skills - Ability to build trusted relationships and influence stakeholders across Engineering, Product, Security, and business teams - Comfortable navigating ambiguity and building processes where none exist - Bachelor’s degree required - Professional certifications such as CISA, CISSP, CRISC, or CIA preferred but not required ## Skills ### Required - technology risk management - technology audit - IT controls testing - information security - control testing - automation - AI ### Nice to have - CISA - CISSP - CRISC - CIA --- Source: [Apply at mastercard.wd1.myworkdayjobs.com](https://mastercard.wd1.myworkdayjobs.com/en-US/CorporateCareers/job/New-York-City-New-York/Manager--Technology-Control-Testing--Services-Technology-Risk_R-294203?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)