Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Job Title Chief Security OfficerOverview The Chief Security Officer (CSO) is responsible for leading and continuously evolving Mastercard’s global, enterprise-wide security strategy across both cybersecurity and physical security domains. Aligned to the Mastercard Technology business unit and reporting to the President and CTO, Mastercard Technology, with a dual reporting relationship to the Chief Administrative Officer, the CSO is accountable for the organization’s entire security posture and plays a critical role in safeguarding the integrity, resilience, and trust of Mastercard’s platforms, operations, people, information assets, technologies, and broader ecosystem.
Serving as a trusted advisor to the Executive Leadership Team and Board of Directors, the CSO will establish the enterprise vision, strategy, and programs that protect the business while enabling innovation and growth in an environment defined by rapid digitization, regulatory complexity, and increasingly sophisticated threats. The role spans Mastercard’s global footprint and requires an executive who can operate at scale across diverse markets, regulatory environments, and stakeholder groups while translating complex and evolving risks into actionable business strategies.
The CSO is responsible for developing and implementing Mastercard’s global security strategy and operating model, integrating cyber and physical security into a unified enterprise capability. As Mastercard’s senior security leader, the CSO will shape company standards, best practices, and thought leadership on physical and cybersecurity risks within the payments industry. This executive will represent Mastercard with regulators, industry bodies, customers, partners, and ecosystem participants, advancing security awareness, risk mitigation, and resilience practices while positioning Mastercard as a trusted leader in global security and risk management.
Key Responsibilities:
Enterprise Security Strategy & Governance
- Develop and execute Mastercard’s enterprise-wide security strategy, providing executive and Board-level guidance on cybersecurity, physical security, emerging risks, resilience priorities, and long-term security investments.
- Establish and advance global security governance and operating frameworks, ensuring alignment with regulatory requirements, industry standards, and consistent application of security policies across technology projects, systems, and services.
- Drive the evolution of Mastercard’s security operating model and technology strategy, strengthening organizational structure, accountability, decision-making, and long-term planning to address current and future business and security needs.
Cybersecurity, Risk Management, and Resilience
- Lead enterprise-wide cyber and operational risk management, including vulnerability management, cyber risk quantification, resilience planning, and preparedness for an evolving threat landscape.
- Partner with business stakeholders to identify, assess, and manage risk, raising awareness of emerging threats and driving effective risk management practices across the organization.
- Ensure organizational readiness and resilience through robust incident response, crisis management, and business continuity capabilities, with a focus on protecting payments and critical infrastructure ecosystems.
Physical Security & Global Operations
- Lead global physical security operations, including enterprise-wide employee protection, executive protection programs, facilities, and critical infrastructure
- Ensure integration of physical and cyber security strategies to deliver a cohesive enterprise risk posture
- Drive consistent execution of security priorities across regions, business units, and operating environments
Ecosystem & External Engagement
- Represent Mastercard as a trusted leader in industry forums, regulatory discussions, and security councils, helping shape security standards, policy development, and best practices.
- Serve as a credible external voice on cybersecurity, resilience, and emerging technology risks, strengthening Mastercard’s reputation and influence across the industry.
- Build strategic partnerships with regulators, industry peers, and external stakeholders to advance security outcomes and address evolving global threats.
Leadership & Culture
- Lead and inspire a globally distributed security organization, building high-performing teams across cyber and physical security while fostering accountability, collaboration, and continuous improvement.
- Serve as a trusted advisor to the Board and executive leadership, providing steady leadership during critical cyber and physical security incidents and embedding a security-first culture that enables business growth and innovation.
- Drive strategic transformation and future readiness, strengthening leadership bench talent, anticipating industry trends, and operating with resilience and impact in a complex global environment.
Requirements:
- Degree in business administration or a technology-related field preferred
- Professional security management certification
- Minimum 15 years of experience in a combination of risk management, information security and IT jobs in large scale and globally dispersed organizations
- Knowledge of common information security management frameworks, such as ISO/IEC 27001, and NIST.
- Proven track record across physical security, cybersecurity, incident response, enterprise resilience, and global travel security programs
- Skilled in advising executive leadership and boards on security strategy and threat mitigation
- Proven AI security leader with expertise in advanced models, model risk, adversarial threats, and responsible AI governance.
- Deep understanding of global regulatory frameworks impacting financial services and payments
- Experience working with law enforcement and relevant government agencies, ideally with a security clearance
- Exceptional communicator who can articulate complex technology strategies clearly, influence stakeholders, and drive execution
- Innovative thinking and leadership capable of driving transformational change and navigating complexity across interdisciplinary teams
- Experience with contract and vendor negotiations and management including managed services.
- Specific experience in Agile (scaled) software development or other best in class development practices.
- Experience with Cloud computing/Elastic computing across virtualized environments.
THIS POSTING RELECTS ONE OR MORE CURRENT VACANCIES ON OUR TEAM, AND MASTERCARD INTENDS TO FILL THIS POSITION BY 11/08/2026. If the fill date has passed, Mastercard intends to fill this position as soon as possible.
Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact reasonable_accommodation@mastercard.com and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
In line with Mastercard’s total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more. Mastercard benefits for interns generally include: 56 hours of Paid Sick and Safe Time; jury duty leave; and on-site fitness facilities in some locations.