below marketmost similar roles pay hereabove market
This role pays less than
66%
of similar roles. Most pay
$128,777–$185,000
— the blue band above.
At the midpoint, this role pays about
$144k
versus about
$157k
for comparable roles.
Based on 240 similar postings.
Employer
About Mastercard
Mastercard is a global technology company in the payments industry, processing transactions between financial institutions and merchants using its extensive network of credit, debit, and prepaid card products. Industry: Payments Technology & Financial Services
Mastercard currently has
150 open roles
on FindRole.
Listed pay typically runs
$122,000–$207,000
across 142 roles with salary data.
The Lead Security Metrics Analyst joins the Security Risk and Control Operations team within Corporate Security to drive the development, collection, and reporting of cybersecurity metrics. This role involves leading the implementation of Key Risk Indicators and Key Performance Indicators to support risk management and regulatory requirements. The analyst will build and maintain Power BI dashboards, scorecards, and executive reporting products while developing Dataverse solutions using Power Apps and Power Automate to streamline metric collection. Key responsibilities include analyzing large datasets to identify emerging risks, establishing metric methodologies, and providing technical leadership on reporting architecture. The position requires expertise in information security, technology risk management, and data modeling to solve complex problems regarding control effectiveness, audit activities, and automated process improvements across the global payments infrastructure.
Lead the development, implementation, and governance of security metrics, KRIs, and KPIs across Corporate Security domains.
Develop and maintain Power BI dashboards and scorecards to provide actionable insights into security risk and control effectiveness.
Build and support Dataverse solutions, including Power Apps and Power Automate, to streamline metric collection and reporting.
Analyze security and operational data to identify trends, emerging risks, and opportunities for process improvement.
Drive automation initiatives to improve data quality and enhance reporting efficiency across security and risk management functions.
Support regulatory remediation and audit activities through evidence gathering and performance measurement capabilities.
Present metric methodologies and risk insights to governance forums and executive stakeholders to support decision-making.
What we're looking for
Experience in developing enterprise metrics, KRIs, KPIs, risk scorecards, and executive reporting solutions.
Experience with Power BI, including data modeling, DAX development, dashboard design, and executive-level visualization.
Experience designing and administering Power Apps, Dataverse solutions, and Power Automate workflows.
Knowledge of information security, technology risk management, governance, compliance, and regulatory reporting.
Experience working with large datasets and integrating information from multiple enterprise platforms and data sources.
Strong written and verbal communication skills to communicate with both technical teams and executive leadership.
Professionally certified in information security, risk management, analytics, or related disciplines (e.g., CISSP, CISA, Security+, CRISC, or equivalent).
Data Loss Prevention (DLP)
User Activity Monitoring (UAM)
User Behavior Analytics (UBA)
Microsoft Purview
Microsoft Defender
Microsoft Sentinel
Endpoint DLP
SIEM
Incident Response
Digital Forensics
Threat Hunting
OSINT
Windows
macOS
GDPR
CISSP
GCIH
GCIA
Security+
Data Loss Prevention (DLP)
User Activity Monitoring (UAM)
User Behavior Analytics (UBA)
Microsoft Purview
Microsoft Defender
Microsoft Sentinel
Endpoint DLP
SIEM
Digital Forensics
Incident Response
OSINT
Windows
macOS
GDPR
CISSP
GCIH
GCIA
Security+
Remote (San Francisco, CA)31 days ago
$140,000–$185,000
Cloud Security
API Security
Network Architecture
Identity and Access Management
Cryptography
AI
GenAI
Automation
Blockchain
Smart Contracts
SOC 2
ISO 27001
DORA
Cybersecurity
Digital Assets
Data Protection
Cybersecurity
Symantec DLP
Microsoft Purview
Zscaler
Data Governance
Information Security
Encryption
SaaS
Cloud Security
Risk Management
Compliance
Requirement Analysis
Data Classification