This role pays more than
86%
of similar roles. Most pay
$151,493–$215,000
— the shaded band above.
At the midpoint, this role pays about
$276k
versus about
$183k
for comparable roles.
Based on 240 similar postings.
Employer
About Mastercard
Mastercard is a global technology company in the payments industry, processing transactions between financial institutions and merchants using its extensive network of credit, debit, and prepaid card products. Industry: Payments Technology & Financial Services
Mastercard currently has
116 open roles
on FindRole.
Listed pay typically runs
$122,000–$207,000
across 104 roles with salary data.
The Vice President, AI Vulnerability Operations leads a multidisciplinary organization responsible for transforming AI-discovered vulnerabilities into measurable enterprise risk reduction. This leader oversees the AI-Powered Vulnerability Command Center, establishing the strategy, operating model, governance, and 24/7 execution for continuous detection and response across development and runtime environments. The role involves building teams across security engineering, automation, analytics, and remediation coordination to manage findings from source code, infrastructure-as-code, cloud configurations, and third-party components. Key responsibilities include translating technical signals into executive risk narratives, managing triage workflows, and coordinating with cross-functional partners in engineering and infrastructure. The ideal candidate possesses extensive experience in cybersecurity, vulnerability management, and application security. They must be proficient in leveraging AI, machine learning, and automation to manage software supply-chain risks while navigating complex frameworks like CVSS, EPSS, KEV, OWASP, MITRE ATT&CK, and NIST.
Define the enterprise strategy, operating model, and governance for AI-powered vulnerability detection and response.
Establish a 24/7 command center to manage the lifecycle of vulnerabilities from discovery to verified closure.
Build and lead a multidisciplinary team across security engineering, automation, analytics, and remediation coordination.
Translate AI-generated signals into actionable tasks while managing false positives and noise for engineering teams.
Oversee standards for vulnerability validation, severity calibration, exploitability assessment, and reachability analysis.
Develop executive-level risk narratives and dashboards to communicate exposure, progress, and investment priorities.
Serve as the senior escalation point for major vulnerability campaigns and systemic risk themes.
Integrate AI-driven security workflows into development, infrastructure, and product delivery pipelines.
What we're looking for
15+ years of experience in cybersecurity, technology risk, vulnerability management, application security, security operations, incident response, or related enterprise leadership roles.
Experience leading large-scale security or technology risk functions with accountability for strategy, execution, operating discipline, metrics, governance, and stakeholder outcomes.
Strong understanding of vulnerability management, application security, cloud security, software supply-chain risk, remediation operations, continuous detection, and enterprise risk prioritization.
Demonstrated ability to operationalize emerging capabilities like AI, automation, analytics, and command center operations into repeatable enterprise processes.
Executive communication skills to translate complex technical risk into clear priorities, decisions, operating expectations, and tradeoffs.
Strong cross-functional influence with engineering, infrastructure, product, security, risk, audit, legal, sourcing, regional, platform, and business stakeholders.
Experience leading vulnerability management, product security, application security, security operations, PSIRT, or software supply-chain security in a large enterprise (preferred).
Experience using AI, machine learning, automation, or agentic workflows to improve security operations, discovery, triage, or remediation (preferred).