Lead Guild Security Engineer

About Mastercard

Mastercard is a leading global technology company operating in the payments industry, dedicated to building an inclusive digital economy worldwide. We empower people, businesses, and governments in over 210 countries and territories by making transactions secure, easy, intelligent, and accessible. Our innovations and partnerships unlock potential and promote sustainability.

Role Overview

The Business Security Enablement (BSE) team is seeking a Lead Security Engineer to join its global guild of information security experts. This role requires advanced expertise in information security and secure engineering to guide product and operational teams in embedding security best practices throughout the development lifecycle. The position demands leadership on complex, global, cross-functional projects ensuring security remains at the core.

Key Responsibilities

• Champion the BSE Guild by advising program security engineers and client-facing teams on security review processes, ensuring adherence to established security policies and standards.
• Author updates to security standards and procedural documentation.
• Create and deliver technical and business presentations related to security topics.
• Interpret and apply security principles, theories, and concepts to meet business needs.
• Lead security efforts on large-scale, global, and cross-functional initiatives.
• Advise and recommend security-compliant solutions meeting regulatory and design requirements for new and enhanced systems.

Candidate Profile

• 7 to 10 years of professional experience in information security domains.
• Possession of CISSP or equivalent recognized security certifications is preferred.
• Strong grasp of security protocols, standards, frameworks, architectures, and secure design, particularly for web applications securing online transactions.
• Technical knowledge or hands-on experience in Cryptography.
• Familiarity with symmetric/asymmetric encryption, digital certificates, SSL, VPN, IPSec, DMZ construction, privileged identity management, file integrity, auditing, logging, and intrusion detection/prevention systems.
• Experience with process automation and continuous improvements.
• Technical skills in programming languages and advanced scripting abilities.
• Proven administrative and security expertise with Linux operating systems.

Corporate Security Responsibilities

• Adhere strictly to Mastercard’s security policies and procedures.
• Maintain confidentiality and ensure the integrity of accessed information.
• Report any suspected breaches or violations of information security.
• Fulfill all mandatory periodic security training as required by Mastercard guidelines.

NICE Framework Roles

• Secure Software Assessor (SP-DEV-002, OPM622)
• Security Architect (SP-ARC-002, OPM652)