Information Security Engineer II

requirements securely by performing Third Party Software Security Evaluations. • Apply knowledge of security principles, theories and concepts to technology reviews. • Use Artificial Intelligence to solve relevant business problems that bring efficiency for the larger organisation. • Understand and own existing business processes & identify opportunities to make them more efficient. • Participate in team meetings, representing the team where required and drive a few initiatives independently. All About You The ideal candidate for this position should have: • Intermediate knowledge of information security, risk management, and data privacy within the domain of digital commerce including relevant practical experience. • Good understanding of identity management, user authentication and authorisation principles. • Demonstrate a broad awareness of security engineering concepts and practices across all phases of the software development lifecycle. • Demonstrated experience designing secure multi-domain Internet-facing applications. • Experience providing security architecture advice for web-based network environments and secure communication between environments, including web services, web applications, and mobile applications. • Demonstrate the ability to articulate and communicate effectively to diverse audiences and properly translate security and risk management terminology into business terms, and recommend alternative solutions to these stakeholders. • Intermediate hands-on experience in scripting or Vibe coding. • Intermediate knowledge and experience in cryptography, including several of the following: encryption, hashing, key management, digital certificates, and TLS. • Technical experience with Java or a similar enterprise programming language, especially related to secure coding best practices, is a plus. • Experience in mobile security architecture concepts, design, and implementation along with Android and i OS is a plus. • Working knowledge and technical security experience with Linux is a plus. NICE Framework References Mastercard Corporate Security Roles have been aligned with the NICE framework (National Initiative for Cybersecurity Education). For this role the NICE Work Roles most closely aligned are: • Cybersecurity Architecture • Insider Threat Analysis • Secure Systems Development • Security Control Assessment • Technology Research and Development Corporate Security Responsibility Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks come with an inherent risk to the organisation, and therefore, it is expected that the successful candidate for this position must: • Abide by Mastercard’s security policies and practices; • Ensure the confidentiality and integrity of the information being accessed; • Report any suspected information security violation or breach, and • Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: Abide by Mastercard’s security policies and practices; Ensure the confidentiality and integrity of the information being accessed; Report any suspected information security violation or breach, and Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines. Everyone wants easier ways to pay; we invent them. Checkout lines are slow; we speed them along. Merchants want more sales; we give them data and insights. People need financial access; we connect them. Corporate purchasing is complicated; we make it simple. Commuters are busy; we speed them on their way. Governments need greater efficiencies; we help create them. Small businesses are virtual; we give them access to a world of buyers. Retailers want to fight fraud; we provide the tools.