Information Security Engineer II
Full-time
Mastercard
Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary
This role is primarily focused on Issue Management System operations, including issue intake validation, action plan review, evidence assessment, and ongoing risk tracking. The ideal candidate will partner closely with technology teams, risk owners, and standard owners to ensure that security gaps are clearly articulated, properly tracked, and remediated or risk accepted in accordance with Mastercard’s standards. Role
This role will also provide support for control assessment activities, including validation of control gaps and alignment to applicable policies and standards. In this position, you will:
• Support end-to-end issue management lifecycle, including issue triage, validation, and workflow progression in Archer
• Review and challenge issue descriptions, risk statements, and impacted control mappings to ensure clarity, accuracy, and alignment to standards
• Evaluate and provide feedback on action plans, including remediation strategies and risk acceptance proposals
• Assess compensating controls and supporting evidence to ensure audit defensible submissions and compliance with Corporate Security expectations
• Partner with issue owners, remediation owners, and standard owners to drive timely resolution of security gaps and prevent delinquency
• Perform structured review of control deficiencies identified through assessments, audits, or self identified issues, ensuring proper documentation within TIMS
• Support light control assessment activities, including validation of control gaps against industry standard, internal standards, and regulatory requirements
• Contribute to issue reporting, trend analysis, and governance insights to support risk discussions and leadership visibility
• Build strong relationships with cross-functional stakeholders across engineering, risk, and governance teams All About You
The ideal candidate for this position has:
• Experience in a payment, fintech, bank, or other highly regulated environment.
• Strong understanding across core security control domains.
• Hands-on experience with issue management or GRC platforms
• Ability to evaluate risk statements, control gaps, remediation plans, and evidence with a high degree of rigor and attention to detail
• Strong written and verbal communication skills, with the ability to produce clear, concise, and audit-defensible documentation
• Experience working with cross-functional stakeholders and managing risk conversations across multiple teams
• Analytical mindset with the ability to challenge assumptions and identify gaps in controls or remediation strategies
• Bachelor’s degree (or equivalent practical experience) in Information Security, Information Systems, Computer Science, or related field.
• Relevant certifications such as CISSP, CISA, Security+, PCI ISA, etc.
NICE Framework references
Mastercard Corporate Security Roles have been aligned with the NICE framework (National Initiative for Cybersecurity Education). For this role the NICE Work Roles most closely aligned are:
• Security Control Assessment (OG-WRL-012): Responsible for conducting independent comprehensive assessments of management, operational, and technical security controls and control enhancements employed within or inherited by a system to determine their overall effectiveness.
• Systems Testing and Evaluation (DD-WRL-007): Responsible for planning, preparing, and executing system tests, evaluating test results against specifications, and reporting findings.
• Vulnerability Assessment Analyst (PR-VAM-001): Responsible for identifying, analyzing, and reporting vulnerabilities and control gaps, including deviations from secure configurations, enterprise standards, and regulatory requirements, and supporting remediation or risk treatment decisions.
• Cybersecurity Architect (DD-WRL-001): Responsible for ensuring that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.
• Systems Security Analyst (OM-ANA-001): Helps ensure secure configuration and operational security requirements are implemented and verifiable in production environments.
Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach; and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines. Accountabilities/Tasks performed:
Information Security Engineer II
Overview
Who is Mastercard? Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships, and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all. Mission First, People Always Corporate Security is responsible for keeping Mastercard safe and secure from cyber and physical threats. We are a highly effective team protecting a major component of global payments infrastructure. Our Security Risk and Control Operations team is at the forefront of this effort in the “1st Line of Defense,” coordinating efforts across Corporate Security, enterprise risk management, and market-facing product teams to assess risks, implement controls to mitigate them, and provide assurance to regulators and stakeholders of Mastercard’s best-in-class performance in information security. Overview We are seeking an Information Security Engineer II to support the identification, assessment, and management of security issues across Mastercard’s technology environment.This role is primarily focused on Issue Management System operations, including issue intake validation, action plan review, evidence assessment, and ongoing risk tracking. The ideal candidate will partner closely with technology teams, risk owners, and standard owners to ensure that security gaps are clearly articulated, properly tracked, and remediated or risk accepted in accordance with Mastercard’s standards. Role
This role will also provide support for control assessment activities, including validation of control gaps and alignment to applicable policies and standards. In this position, you will:
• Support end-to-end issue management lifecycle, including issue triage, validation, and workflow progression in Archer
• Review and challenge issue descriptions, risk statements, and impacted control mappings to ensure clarity, accuracy, and alignment to standards
• Evaluate and provide feedback on action plans, including remediation strategies and risk acceptance proposals
• Assess compensating controls and supporting evidence to ensure audit defensible submissions and compliance with Corporate Security expectations
• Partner with issue owners, remediation owners, and standard owners to drive timely resolution of security gaps and prevent delinquency
• Perform structured review of control deficiencies identified through assessments, audits, or self identified issues, ensuring proper documentation within TIMS
• Support light control assessment activities, including validation of control gaps against industry standard, internal standards, and regulatory requirements
• Contribute to issue reporting, trend analysis, and governance insights to support risk discussions and leadership visibility
• Build strong relationships with cross-functional stakeholders across engineering, risk, and governance teams All About You
The ideal candidate for this position has:
• Experience in a payment, fintech, bank, or other highly regulated environment.
• Strong understanding across core security control domains.
• Hands-on experience with issue management or GRC platforms
• Ability to evaluate risk statements, control gaps, remediation plans, and evidence with a high degree of rigor and attention to detail
• Strong written and verbal communication skills, with the ability to produce clear, concise, and audit-defensible documentation
• Experience working with cross-functional stakeholders and managing risk conversations across multiple teams
• Analytical mindset with the ability to challenge assumptions and identify gaps in controls or remediation strategies
• Bachelor’s degree (or equivalent practical experience) in Information Security, Information Systems, Computer Science, or related field.
• Relevant certifications such as CISSP, CISA, Security+, PCI ISA, etc.
NICE Framework references
Mastercard Corporate Security Roles have been aligned with the NICE framework (National Initiative for Cybersecurity Education). For this role the NICE Work Roles most closely aligned are:
• Security Control Assessment (OG-WRL-012): Responsible for conducting independent comprehensive assessments of management, operational, and technical security controls and control enhancements employed within or inherited by a system to determine their overall effectiveness.
• Systems Testing and Evaluation (DD-WRL-007): Responsible for planning, preparing, and executing system tests, evaluating test results against specifications, and reporting findings.
• Vulnerability Assessment Analyst (PR-VAM-001): Responsible for identifying, analyzing, and reporting vulnerabilities and control gaps, including deviations from secure configurations, enterprise standards, and regulatory requirements, and supporting remediation or risk treatment decisions.
• Cybersecurity Architect (DD-WRL-001): Responsible for ensuring that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.
• Systems Security Analyst (OM-ANA-001): Helps ensure secure configuration and operational security requirements are implemented and verifiable in production environments.
Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach; and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines. Accountabilities/Tasks performed:
- Strong security and technical skills to uncover security gaps within implemented technologies
- Communicate security gaps found to platform and compliance teams for tracking to remediation
- Computer Science or Pen testing background
- Strong communication and writing skills
- Relationship building skills: outgoing and able to build a strong rapport with fellow team members and platform owners
- Positive and go getter attitude
- Strong commitment levels from a results delivery perspective
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Vacancy posted 10 days ago
Similar jobs that could be interesting for youBased on the Information Security Engineer II in India vacancy
- ...choices, making transactions secure, simple, smart and accessible.... ...Title and Summary Data Scientist II-2 Job Description Summary... ...and services (recommendation engine, anti-money laundering, fraud... ...Role: • Gather relevant information to define the business problem...SuggestedFull timeWorldwide
Mastercard
India10 days ago - ...payments choices, making transactions secure, simple, smart and accessible. Our... .... Title and Summary Data Scientist II Job Description – Data & Product Analytics... ...’s degree in a Computer Science, Information Technology, Engineering, Mathematics, Statistics, M.S./M.B.A....SuggestedFull timeWorldwide
Mastercard
India10 days ago - ...choices, making transactions secure, simple, smart and accessible.... ...Title and Summary Data Scientist II Job Description –Product... ...based revenue methodology to inform and guide Mastercard’s Strategy... ...Science, Information Technology, Engineering, Mathematics, Statistics, M.S....SuggestedFull timeWorldwide
Mastercard
India10 days ago - ...for value movement. If the internet moves information, we move value: crypto, stablecoins,... ...IST * About the Opportunity The Security Operations (SecOps) team at MoonPay is dedicated... ...are looking for an Information Security Engineer, SaaS & Integration Security, to join...SuggestedRemote jobFull timeWork experience placementWork at officeRelocationHome officeFlexible hours
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...potential. Title and Summary Data Engineer II We believe in power of data. We... ...for data analysis, data preparation and information delivery: Alteryx and Tableau • Core...SuggestedFull timeTemporary workWork experience placementWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...potential. Title and Summary Data Engineer II Data Engineer, DPO Who is... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeLocal areaWorldwideFlexible hours
- ...choices, making transactions secure, simple, smart and accessible... ...and Summary Data Scientist II Role Overview Build and... ...role combines strong software engineering with model fine-tuning, Databricks... ...degree in Computer Science, Information Technology,or a related STEM...Full timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Senior Data Engineer Data Engineer / Machine Learning... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Senior Data Engineer - Spark / Kafka / NiFi Job Posting... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Lead Data Engineer Position Overview Have you ever... ...degree in Computer Science, Engineering, Information Systems, or related field Strong handson...Full timeImmediate startWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Lead Data Engineer Who is Mastercard? Mastercard is a... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...Response Technology and Automation Security Engineer Overview The Corporate Security... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...Summary Analyst, Big Data Analytics & Engineering Overview: About Mastercard Mastercard... ...insights, empowering teams to make informed decisions and strengthen client value propositions...Full timeWorldwide
Mastercard
India10 days ago - ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...practices in machine learning and data engineering to develop scalable solutions.... ...or Master’s Degree in Computer Science, Information Technology, Engineering, Mathematics, Statistics...Full timeWorldwide
Mastercard
India10 days ago - ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...to real-world problems. • Promote engineering best practices and contribute to a... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
Mastercard
India10 days ago - ...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation,... ...Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization...Full timeWorldwideFlexible hours
Mastercard
India17 days ago - ...a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation,... ...programs, business Test & Learn experimentation, and data-driven information and risk management services. The Business Insights Team is...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Principal Data Engineer (Data Platforms) Who is Mastercard?... ...involving access to Mastercard assets, information, and networks comes with an inherent...Full timeContract workLocal areaWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Senior Data Engineer Overview Mastercard powers the... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Senior Data Engineer, Data Engineering Job Description... ...intelligence tools for the delivery of information products and analytical offerings to a large...Full timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...and Summary Vice President, Data Engineering Our Purpose Mastercard powers economies... ...in Data Science, Computer Science, Information Technology, Business Administration, or...Full timeWorldwide3 days per week
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Senior AI Data Engineer Overview As a Senior AI Data... ...in Computer Science, Data Engineering, Information Systems, or a related field Significant...Full timeWorldwide
- ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...Mastercard company is seeking a Senior Software Engineer, which serves various client-tele such... ...You Minimum bachelor’s degree in information technology, Computer Science or...Full timeWork experience placementWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ...to the team lead for Data Systems Engineering. An individual who will: • create clear... ...involving access to Mastercard assets, information, and networks comes with an inherent...Full timeWorldwide
- ...payments choices, making transactions secure, simple, smart and accessible. Our technology... ..., KPI framework design, data engineering, dashboard development, stakeholder alignment... ...involving access to Mastercard assets, information, and networks comes with an inherent...Full timeWorldwide
- ...and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for smart... ...the Role We are seeking an experienced Senior Principal Data Engineer to serve as a technical leader responsible for architecting...Full timeFlexible hours
MoneyLion
India10 days ago - ...payments choices, making transactions secure, simple, smart and accessible. Our technology... .... Title and Summary Manager AI Engineering Mastercard's Business & Market Insights... ...involving access to Mastercard assets, information, and networks comes with an inherent...Full timeWorldwide
Mastercard
India10 days ago - ...digital payments choices, making transactions secure, simple, smart and accessible. Our... ...potential. Title and Summary Lead Data Engineer (Data Platforms) Role Summary We... ...involving access to Mastercard assets, information, and networks comes with an inherent risk...Full timeWorldwide
- ...and vision to protect consumers and help them grow, manage and secure their digital and financial lives. We’re always looking for... ...the Role We are seeking an experienced Senior Manager, Data Engineering to serve as a technical people leader responsible for owning the...Full timeFlexible hours
MoneyLion
India10 days ago - ...Global Capital, CoinFund, Gumi Cryptos) and crypto projects (Aave and Kyber Network). About the role You'll be the dedicated security engineer at a derivative exchange (~250 people, 50-100 person dev team). All infra is AWS. DevOps builds it; you make sure it's secure...Full time
Delta Exchange
India10 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Information Security Engineer II. Be the first to apply!
Related searches