Information Security Engineer II

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Information Security Engineer II Overview Who is Mastercard? Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships, and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all. Mission First, People Always Corporate Security is responsible for keeping Mastercard safe and secure from cyber and physical threats. We are a highly effective team protecting a major component of global payments infrastructure. Our Security Risk and Control Operations team is at the forefront of this effort in the “1st Line of Defense,” coordinating efforts across Corporate Security, enterprise risk management, and market-facing product teams to assess risks, implement controls to mitigate them, and provide assurance to regulators and stakeholders of Mastercard’s best-in-class performance in information security. Overview We are seeking an Information Security Engineer II to support the identification, assessment, and management of security issues across Mastercard’s technology environment. This role is primarily focused on Issue Management System operations, including issue intake validation, action plan review, evidence assessment, and ongoing risk tracking. The ideal candidate will partner closely with technology teams, risk owners, and standard owners to ensure that security gaps are clearly articulated, properly tracked, and remediated or risk accepted in accordance with Mastercard’s standards. Role This role will also provide support for control assessment activities, including validation of control gaps and alignment to applicable policies and standards. In this position, you will: • Support end-to-end issue management lifecycle, including issue triage, validation, and workflow progression in Archer • Review and challenge issue descriptions, risk statements, and impacted control mappings to ensure clarity, accuracy, and alignment to standards • Evaluate and provide feedback on action plans, including remediation strategies and risk acceptance proposals • Assess compensating controls and supporting evidence to ensure audit defensible submissions and compliance with Corporate Security expectations • Partner with issue owners, remediation owners, and standard owners to drive timely resolution of security gaps and prevent delinquency • Perform structured review of control deficiencies identified through assessments, audits, or self identified issues, ensuring proper documentation within TIMS • Support light control assessment activities, including validation of control gaps against industry standard, internal standards, and regulatory requirements • Contribute to issue reporting, trend analysis, and governance insights to support risk discussions and leadership visibility • Build strong relationships with cross-functional stakeholders across engineering, risk, and governance teams All About You The ideal candidate for this position has: • Experience in a payment, fintech, bank, or other highly regulated environment. • Strong understanding across core security control domains. • Hands-