Vice President Technology Risk Reporting & Governance

\n Title and Summary\n

Vice President Technology Risk Reporting & Governance

\n

This role is accountable for the end-to-end risk reporting governance and stakeholder coordination of technology risk, ensuring effective oversight from first-line entities, CTO risk functions through to second-line enterprise risk requirements. The role drives alignment with Enterprise Risk Management (ERM), Operational Risk and Technology Risk frameworks and expectations, while supporting audit and regulatory responses. Partnering closely with Risk Champions, Business Risk Managers, and cross-functional stakeholders, the position ensures disciplined risk reporting, material readiness, escalation, and action follow-through, ultimately supporting both regulatory obligations and organisational risk management expectations.

Role\n

\n
• Lead the evolution of the Technology Risk Reporting Governance framework, driving horizontal and vertical alignment of technology risk oversight across the organisation.
\n
• Define and embed enterprise reporting standards and minimum reporting requirements, strengthening connectivity between forums and committees and enabling effective escalation, aggregation, and executive decision-making.
\n
• Own the Technology Risk Committee (TRC) operating model, including governance structure, charter, membership, annual agenda, and overall effectiveness of the forum.
\n
• Provide strategic oversight of the TRC governance lifecycle, ensuring high-quality materials, robust challenge, timely decision-making, and effective action tracking.
\n
• Facilitate senior stakeholder discussions, driving alignment on technology risk priorities, emerging concerns, strategic decisions, and risk mitigation activities.
\n
• Oversee the development and quality assurance of technology risk reporting and committee materials, ensuring clear, insightful, and decision-oriented reporting for executive and board-level governance forums.
\n
• Own the enterprise technology risk reporting agenda, including Top Technology Risks, risk assessments, key risk indicators, and other reporting required to support effective oversight and governance.
\n
• Partner with Technology Risk Leadership, Risk Champions, Business Risk Managers, and second-line stakeholders to ensure alignment with Enterprise Risk Management, Operational Risk, and Technology Risk expectations.
\n
• Provide executive oversight of Corporate Risk Assessments concerning Operational Resilience reporting, ensuring risk positions, mitigation strategies, and risk register updates accurately reflect the organisation's risk profile.
\n
• Lead the development and continuous enhancement of enterprise-wide technology risk reporting, ensuring comprehensive coverage of strategic, operational resilience, and information security risks, while providing clear visibility of mitigation progress and emerging exposures.
\n
• Establish and govern the enterprise technology emerging risk programme, ensuring emerging threats and trends are identified, assessed, escalated, and incorporated into risk management and reporting processes where appropriate.
\n
• Act as a senior stakeholder for regulatory, audit, and supervisory engagements, ensuring technology risk and operational resilience responses are coordinated, accurate, and aligned with regulatory and organisational expectations.
\n
• Drive continuous improvement of technology risk reporting governance and oversight practices, identifying opportunities to enhance efficiency, transparency, data quality, and executive insight across the risk management lifecycle.
\n

All About You\n

\n
• 10+ years of progressive experience in technology risk management, risk governance, operational resilience, or related risk and control disciplines within a complex, global organisation.
\n
• Demonstrated leadership of enterprise-wide governance programmes, establishing reporting frameworks, governance operating models, and oversight mechanisms that support regulatory and organisational objectives.
\n
• Proven ability to shape and influence executive and board-level risk discussions, providing clear insight, challenge, and direction through high-quality reporting, metrics, and narrative.
\n
• Deep experience partnering with second-line functions (ERM, Operational Risk, Compliance, Information Security, Internal Audit) and leading responses to regulatory, audit, and supervisory engagements.
\n
• Strong stakeholder management and influencing skills, with the ability to align diverse senior stakeholders, build consensus, and drive outcomes across a matrixed organisation without direct authority.
\n
• Strategic thinker with exceptional communication skills, able to translate complex technology and operational risk matters into concise, actionable insights for executive audiences.
\n
• Experience overseeing end-to-end risk reporting governance, ensuring alignment from first-line risk ownership through second-line enterprise requirements, while supporting effective escalation, aggregation, and decision-making across committees and forums.
\n
• Track record of building, leading, and developing high-performing teams, fostering a culture of accountability, collaboration, and continuous improvement.
\n

Corporate Security Responsibility\n

\n
• Abide by Mastercard’s security policies and practices.
\n
• Ensure the confidentiality and integrity of the information being accessed.
\n
• Report any suspected information security violation or breach.
\n
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
\n

Equal Opportunity\n

Mastercard is an equal opportunity employer and is committed to creating an inclusive environment for all employees.

\n