HireMO

Our Purpose

_Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential._

Title and Summary

Principal Security Monitoring and Response Analyst

Director - Corporate Security Operations (Principal Program Lead)

Who is Mastercard?

Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships, and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.

Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.

Mission First, People Always

As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the front who make this happen every day.

By taking care of our people, their well-being, and their career development, we provide them with the necessary tools and environment to ensure the success of our mission.

Overview

The Principal Security Monitoring and Response Analyst is the principal program lead and senior subject matter expert for the integrated Security Operations Center (SOC), Incident Response (IR), and Insider Threat capability. The role's mission is to bring these operations together as one coordinated program, improving how Mastercard detects, investigates, responds to, and learns from cyber and insider threats while preserving functional ownership, investigative independence, and appropriate confidentiality.

The role sets program direction, establishes common standards, coordinates cross-functional delivery, and drives measurable improvements across people, process, and technology. It provides authoritative technical and operational leadership for complex incidents and ensures that modernization initiatives are adopted into business-as-usual operations.

In this role you will:

- Develop and govern the integrated SOC, IR, and Insider Threat program roadmap, aligning priorities, milestones, dependencies, risks, resources, capability gaps, and success measures with the wider multi-year modernization strategy.

- Act as the authority for integrated operating practices while respecting functional ownership and investigative independence.

- Integrate technology modernization into business-as-usual operations through clear process ownership, adoption plans, training, and sustained use.

- Define end-to-end operating models, standards, playbooks, escalation paths, decision rights, and handoffs across security monitoring and response.

- Define and monitor measures of operational speed, quality, consistency, preparedness, and effectiveness across detection, triage, investigation, containment, recovery, and post-incident improvement, supported by valid evidence.

- Serve as the senior SME for high-severity incidents and sensitive security matters, providing technical direction and cross-functional coordination while preserving appropriate confidentiality and need-to-know controls.

- Leverage threat intelligence, incident trends, insider threat findings, quality reviews, and root-cause analysis to drive continuous improvement across investigation methodologies, response workflows, escalation processes, and operational readiness.

- Validate operational readiness through exercises, simulations, and control testing in partnership with Security Engineering, Threat Intelligence, Vulnerability Management, Crisis Management, Legal, and stakeholders across the broader business.

- Own cross-functional operational issues through resolution, ensuring risks, decisions, actions are clearly documented and tracked.

- Influence functional leaders and delivery teams, building alignment, resolving cross-team friction, and ensuring agreed improvements are implemented and sustained.

All About You

The ideal candidate for this position should have:

- Extensive expertise leading enterprise incident response, forensic response, security monitoring, threat-led detection, threat hunting and complex investigations.

- Strong understanding of insider threat operations, including behavioral and technical indicators, case governance, legal and HR partnership, confidentiality, and evidence handling.

- Strong recent experience with Security Information and Event Management (SIEM) platforms.

- Demonstrated ability to design and mature operating models across global SOC, IR, Insider Threat, Threat Intelligence, engineering, and business response teams in complex, regulated environments.

- Experience applying automation, orchestration, analytics, and AI-assisted capabilities to improve detection quality, investigative speed, consistency, and analyst effectiveness.

- Ability to convert complex technical and operational issues into clear decisions, investment cases, executive communications, and measurable outcomes.

- Proven success leading strategic programs and influencing senior stakeholders, technical specialists, and partner functions without direct authority.

- Relevant advanced security, incident response, forensic, or program leadership certifications are preferred.

Corporate Security Responsibility

Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:

- Abide by Mastercard's security policies and practices;

- Ensure the confidentiality and integrity of the information being accessed;

- Report any suspected information security violation or breach, and

- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team ...

Apply Externally

Jobs

Principal Security Monitoring and Response Analyst

Summary

You Need a MO Jobs Account First

Jobs

Jobs

Principal Security Monitoring and Response Analyst

Summary

Do You Have a MO Jobs Account?

First, Let's Find Your MO Jobs Account

Create an Account to Apply

You Need a MO Jobs Account First

HireMO Terms of Use

1. Acceptance and Changes

2. A No-Cost Public Workforce Service

3. Eligibility, Youth, and Authority

4. Accounts and Security

5. Accuracy Attestation and Program Information

6. Job Seeker Terms

7. Employer Terms

8. Assessments and Matching

9. Artificial Intelligence Features

10. Public Records and Required Notices

11. User Content and Permissions

12. Acceptable Use

13. Intellectual Property and Government Marks

14. Other Users and Third-Party Services

15. Electronic Communications

16. Suspension, Termination, and Records

17. Disclaimers

18. Limitation of Liability and Sovereign Immunity

19. Employer Indemnification

20. Governing Law and General Terms

21. Contact, Accessibility, and Complaints