Director, Internal Audit, Technology – Pune, India

Our Purpose

We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. We cultivate a culture of inclusion for all employees that respects their individual strengths, views, and experiences. We believe that our differences enable us to be a better team – one that makes better decisions, drives innovation and delivers better business results.

Title and Summary

Director, Internal Audit, Technology – Pune, IndiaOverview
• Do you thrive in a fast-paced environment where both attention to detail and focus on the big picture are equally and critically important?
• Are you eager to understand Mastercard’s global business and provide senior management with insights and perspectives on governance, risk management, and internal controls?
• Have you been successful as part of a global team with diverse skills and experiences?
Mastercard Internal Audit team provides independent and objective assurance and advisory services to assess and enhance the effectiveness and efficiency of Mastercard’s governance, risk management, internal controls, processes, and activities, globally.
This position will be responsible for leading multiple projects and activities within Mastercard Internal Audit team, with a primary focus on technology audits and India / RBI related requirements. This position will be based in Pune, India, and will report to the VP, Internal Audit, Regions & Markets. This position will also have a strong connection with the Internal Audit technology team.
Role
• Be part of a dynamic global team and collaborate with colleagues, locally and from other Mastercard offices around the world. Be a champion and advocate for strong governance, risk management, and internal controls. Partner with other risk and control functions across the organization to strengthen Mastercard’s three lines of defense model.
• Lead multiple assurance and advisory projects across various markets, products, services, technology, regulatory, or other functional areas, as driven by the Internal Audit annual plan. Provide guidance and supervision to more junior project team members.
• Within each assigned project, understand specific risks (e.g., strategic, operational, financial, legal, regulatory, technology, other) and business requirements. Lead the development of risk-based testing and documentation of supporting workpapers in qualitative and timely manner. Evaluate compliance with relevant policies, procedures, and requirements, assess controls design adequacy and operating effectiveness, and identify controls gaps and improvement opportunities. Lead the development of draft reportable issues for validation with management and understand related risk, impact, and root cause. Partner with management to develop action plans that remediate gaps identified in a sustainable manner. Track, monitor, and validate the completion of action plans by management.
• Within Mastercard Internal Audit team, this position will have a primary focus on technology audits and India / RBI requirements. This position will therefore lead various technology assurance and advisory projects, working in close coordination with the broader Mastercard Internal Audit technology team.
• This position is also intended to become the Subject Matter Expert (SME) and primary contact for all India / RBI related matters for the Mastercard Internal Audit team. Accordingly, this position will establish and develop strong relationships with the other Mastercard functions (first and second line) which are also involved with India / RBI requirements (e.g., India CIO, CISO, Reg Affairs, Technology, TRM, and the India Technology & Operations Governance Committee). Also, this position will build and develop Mastercard Internal Audit knowledge around India / RBI requirements. That knowledge will be leveraged as an input and contribution to the Internal Audit annual risk assessment and planning process, leading to the development of the Internal Audit annual plan.
All About You
• Prior successful experience in internal and/or external auditing, with specific expertise in testing various information technology and security areas (e.g., IT GCC, IT Operations, SDLC, UNIX, HP Non-Stop and Windows environments, IT security practices, PCI DSS compliance, ISO 27001 standards). Relevant professional credentials and certifications (e.g., CISA, CISSP) highly desirable.
• Ability to quickly understand and critically analyze complex IT processes, to identify and assess potential risks, and determine whether those risks are appropriately managed. Proficiency in various audit techniques such as inquiry, walkthrough, validation, reperformance, sampling, analytics, problem-solving, and root cause analysis.
• Transferrable skills from prior experience in operations, finance, legal, regulatory, technology, compliance, internal controls, or any similar role within Mastercard or other global organizations, with a strong focus on risk management.
• Excellent interpersonal and communication skills, both written and verbal, including professional fluency in English.
• Ability to work well independently and within a team, and to deliver high-quality work within allotted budget and timing.
• Intellectually curious, self-motivated, passionate, service-minded, culturally attuned, and flexible. Committed to self-development, open to constructive feedback, and actively seeking opportunities to capitalize on strengths and address development areas.
• Bachelor’s degree with concentration in information technology, information systems, science, or engineering.
• Proficient with MS Excel, Word, PowerPoint, and familiar with ACL or similar data analytics/auditing tools.
• Ability to travel up to 10%.

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

  
  

• Ensure the confidentiality and integrity of the information being accessed;

  
  

• Report any suspected information security violation or breach, and

  
  

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.