Manager, Technology Control Testing, Services Technology Risk

Mastercard

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
New York, NY
Salary
$131,000–$216,000 / yr
Posted
7 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $185k
This role $174k
$120k $232k
below market most similar roles pay here above market

This role pays less than 61% of similar roles. Most pay $153,500–$216,200 — the blue band above. At the midpoint, this role pays about $174k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Mastercard

Mastercard is a global technology company in the payments industry, processing transactions between financial institutions and merchants using its extensive network of credit, debit, and prepaid card products. Industry: Payments Technology & Financial Services

Mastercard currently has 162 open roles on FindRole.

Listed pay typically runs $122,000–$207,000 across 152 roles with salary data.

Most-posted roles

View all roles at Mastercard

At a glance

TL;DR · Manager, Technology Control Testing, Services Technology Risk

JOB TITLE: Manager, Technology Control Testing, Services Technology Risk The Manager, Technology Control Testing joins the Services Technology Risk team to build and lead the first-line technology control testing function. This role involves designing and executing a risk-based annual control testing plan across products and platforms within the Services organization. Key responsibilities include performing hands-on Test of Design and Test of Operating Effectiveness, developing repeatable test scripts, and managing direct reports and consultants. The candidate must navigate complex technical architectures to distinguish product-level controls from shared platform controls while incorporating regulatory and data-residency requirements. Required expertise includes technology risk management, information security, and knowledge of frameworks like NIST, ISO 27001, and COBIT. The role focuses on strengthening engineering practices, improving control effectiveness, and identifying opportunities for automation and AI-enabled testing solutions to ensure resilient technology environments.

What you'll do

  • Build and execute a risk-based annual control testing plan for products and platforms across the Services organization.
  • Lead, coach, and develop direct reports while overseeing consultant resources to ensure quality and completeness of testing work.
  • Perform hands-on, end-to-end technology control testing to differentiate between product-level and platform-level controls.
  • Conduct control scoping based on risk data, indicators, and prior findings while accounting for resource capacity and effort.
  • Develop and maintain repeatable test scripts for Test of Design (TOD) and Test of Operating Effectiveness (TOE).
  • Communicate testing results, control gaps, and practical remediation recommendations to stakeholders and leadership.
  • Identify opportunities to automate testing and partner with engineering teams to implement AI-enabled solutions.
  • Incorporate regulatory and data-residency requirements into test planning to ensure full coverage of the control lifecycle.

What we're looking for

  • Bachelor’s degree required.
  • Deep expertise in technology risk management, technology audit, IT controls testing, information security, or related disciplines.
  • Experience managing people or demonstrated experience leading, coaching, and reviewing the work of others.
  • Proven experience designing, executing, and maturing a risk-based control testing program or annual test plan.
  • Strong hands-on experience performing Test of Design and Test of Operating Effectiveness, including writing test scripts and documenting workpapers.
  • Strong knowledge of technology controls including encryption, logging, SDLC, change management, IAM, vulnerability management, and operational resiliency.
  • Ability to understand complex, multi-layered technical architectures and determine control ownership across shared platforms and products.
  • Familiarity with regulatory expectations, data-residency requirements, and frameworks such as NIST, ISO 27001, and COBIT.
  • Professional certifications such as CISA, CISSP, CRISC, or CIA (preferred).

More like this

Similar roles

Director, Services Technology Risk

Mastercard

Remote (California) 7 days ago $142,000–$234,000
AI ML Generative AI NIST ISO 27001 COBIT Cybersecurity Cloud Services Identity and Access Management Vulnerability Management Change Management Third-party Risk Data Protection Operational Resilience RCSA Risk Registers Automation Analytics CISA CISSP CRISC CISM
Remote

Tech Risk and Controls Lead, Tech Resiliency Testing

JPMorgan Chase

Plano, TX 5 days ago
AWS Claude VS Code LLM Infrastructure-as-Code CI/CD Disaster Recovery RTO RPO Prompt Engineering Data Analytics Cybersecurity Risk Management Cloud Engineering Observability Tooling
5+ yrs exp

Tech Risk and Controls Director

JPMorgan Chase

New York, NY +3 4 days ago
Technology Risk Management Controls-as-Code Policy-as-Code Artificial Intelligence Agentic AI Cybersecurity Identity and Access Management Change Management Continuous Monitoring Root-Cause Analysis Automation Data Quality Audit Readiness Operational Resilience Configuration Management Telemetry-driven Controls
7+ yrs exp

Senior Manager, Tech Risk & Analysis

Capital One Financial

McLean, VA +3 28 days ago
Cybersecurity Risk Management AWS GCP Azure Cloud-native Architecture Infrastructure as Code Identity and Access Management Application Security Cloud Security Data Protection Chaos Engineering Site Reliability Engineering Observability Incident Response Data Analysis Disaster Recovery Business Continuity
7+ yrs exp

Senior Lead, Technology Risk & Controls, SOX / SOC Programs

Northern Trust

Chicago, IL 96 days ago
SOX SOC 1 SOC 2 ITGC COBIT NIST COSO GRC Archer ServiceNow AuditBoard Power BI SDLC Identity and Access Management Privileged Access Management Change Management Cybersecurity Cloud Governance Information Security CISA CISSP CRISC CIA CPA
10+ yrs exp Hybrid

Manager, Tech Risk & Analysis

Capital One Financial

Richmond, VA +2 28 days ago $164,800–$188,100
Cybersecurity Cloud Security AWS Infrastructure as Code Identity and Access Management Application Security Data Protection Site Reliability Engineering Chaos Engineering Incident Response Observability Disaster Recovery Business Continuity Machine Learning Artificial Intelligence Data Management Technology Auditing SLAs SLOs
5+ yrs exp