Director, IT Audit

Director, IT Audit

Location: London

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences.

Title and Summary

Director, IT Audit
Overview

• Do you thrive in a fast-paced environment where both attention to detail and big picture focus are equally and critically important?
• Are you eager to understand Mastercard’s global business and provide management with insight and perspective on governance, risk management, and internal controls?
• Have you been successful as part of a global team with diverse skills and experiences?

All activities involving access to Mastercard assets, information, and networks come with an inherent risk to the organization. Therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach;
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Knowledge/Experience (preferred):

• Internal/external IT audit experience
• Strong knowledge of IT general computer controls and related operations, including mainframe, UNIX, HP Nonstop, and Windows environments
• Understanding of IT security practices, PCI DSS compliance, and ISO 27001 standards
• Broad understanding of software engineering concepts and methodologies
• Digital commerce/e-commerce knowledge and experience a plus
• Sound understanding of the Standards for Professional Practice of Internal Audit of the Institute of Internal Auditors, auditing procedures, and techniques

Corporate Security Responsibility:

• Intellectually curious, self-motivated, and passionate, able to work both independently and as part of a team
• Ability to quickly understand and critically analyze complex IT processes, identify and assess potential risks, and determine whether those risks are appropriately mitigated
• Demonstrated experience in internal/external IT audit, operations, or IT within a major global organization with a focus on risk management
• Skilled at analysis/critical thinking
• Ability to interact with senior and executive management
• Ability to handle multiple tasks and consistently meet established deadlines
• Able to deliver high-quality work, within budget and on time
• Strong project management skills
• Excellent interpersonal communication skills, both written and verbal
• Proficient with MS Word, MS Excel, MS Access, ACL, or similar audit tools
• Bachelor's degree with concentration in information systems, information technology, computer science, or engineering; advanced degree desirable (e.g., CISSP, CISA)
• Ability to travel up to 40%

All About You:

• Manage and/or perform multiple concurrent audit projects including assessing risks, informing scope, executing test procedures, documenting results, work paper preparation/review, and reporting
• Identify control gaps and process improvement opportunities, and evaluate compliance with operational, legal, regulatory, and IT policies and procedures
• Conduct audits and reviews of technology and operational areas that are complex in nature, applying sound judgment to assess effectiveness and efficiency of controls, processes, and operations
• Consult with management in determining action items required for resolution of control issues
• Track and monitor management action plans to ensure sustainable resolution of control gaps
• Contribute significantly in the planning and execution of the Audit Department’s annual risk assessment process and development of the audit plan
• Conduct/review Sarbanes Oxley testing of internal controls over financial reporting and advocate for strong risk management and governance controls
• Provide risk and control advice and education throughout the organization
• Work with colleagues located both locally and in various offices around the world

Role:

Mastercard’s global Internal Audit team provides independent and objective assurance and advisory services to assess and enhance the effectiveness and efficiency of Mastercard’s governance, risk management, and internal control processes. This position will be responsible for leading and/or providing day-to-day support with risk assessment and IT audit and advisory projects based in London.