Title and SummaryVice President, Information Security Engineering
Overview
The Vice President, Employee Access Management Governance is responsible for leading the governance, standards, controls, onboarding, compliance, audit, and operational management functions across Employee Access Management. This role ensures that access management processes are consistently defined, enforced, measured, and improved across the enterprise, while balancing security, operational effectiveness, user experience, and regulatory expectations.
The VP will establish and maintain the governance model for access management capabilities across workforce, privileged, application, machine, and emerging AI-based identities. This includes ownership of access management standards, process controls, operational routines, audit readiness, compliance support, policy alignment, onboarding governance, issue remediation, and continuous improvement across the EAM environment.
This leader will partner closely with product, engineering, cyber risk, technology, compliance, audit, application owners, service teams, and business stakeholders to ensure access management practices are scalable, well-controlled, operationally effective, and aligned to enterprise security objectives.
Responsibilities
Lead the EAM Governance organization responsible for access management governance, standards, controls, compliance, audit support, policy alignment, onboarding governance, and operational process enforcement.
Define, maintain, and enforce enterprise access management standards, procedures, operating models, and control expectations across EAM capabilities.
Own the day-to-day governance and operational management of EAM processes, ensuring teams follow defined standards, controls, service expectations, and compliance requirements.
Provide leadership over access management compliance, audit readiness, control execution, evidence management, remediation tracking, and regulatory response activities.
Partner with internal audit, compliance, risk, and control teams to ensure access management controls are clearly defined, effectively executed, continuously monitored, and supported with appropriate evidence.
Lead governance over application onboarding into EAM capabilities, ensuring consistent intake, prioritization, readiness assessment, control alignment, documentation, and operational handoff.
Establish standards and governance for onboarding emerging access use cases, including AI-enabled applications, AI agents, machine identities, service accounts, privileged access patterns, and non-human identities.
Oversee operational access management processes, including recurring business-as-usual activities, work order resolution, service channels, access hygiene, segregation of duties support, user acceptance testing, quality assurance, and process optimization.
Drive continuous improvement across EAM governance and operations by using metrics, process performance data, issue trends, customer feedback, risk indicators, and control outcomes.
Lead remediation efforts related to audit findings, control gaps, policy exceptions, operational issues, and access management process deficiencies.
Partner with EAM Product and Engineering teams to ensure governance, compliance, onboarding, and operational requirements are incorporated into product roadmaps, platform migrations, and modernization efforts.
Provide governance oversight for major EAM initiatives, migrations, and transformation activities, including EAM tool controls migration, EAM tool transition activities, governance-related processes, and other access management modernization programs.
Define and maintain clear accountability models across product, governance, operations, control owners, application teams, and business stakeholders.
Develop and sustain metrics, dashboards, and reporting that demonstrate control effectiveness, operational performance, onboarding progress, remediation status, audit readiness, and risk reduction.
Ensure EAM processes comply with applicable regulatory, operational, security, and enterprise policy requirements.
Serve as a senior authority on access governance decisions, control expectations, operational risk, policy interpretation, audit response, and process design.
Experiences
Significant experience leading identity and access management, access governance, compliance, audit, risk management, security operations, or related enterprise security functions.
Demonstrated experience defining, implementing, and enforcing governance frameworks, operational standards, controls, policies, and process management routines.
Strong understanding of access management disciplines, including identity lifecycle, access provisioning, application onboarding, privileged access, access reviews, segregation of duties, control monitoring, remediation, and audit support.
Experience leading audit, regulatory, compliance, and control-related activities, including evidence collection, issue management, remediation tracking, and stakeholder response.
Proven ability to operate across large, complex, global environments with multiple stakeholders, competing priorities, and significant operational and regulatory expectations.
Experience partnering with product, engineering, architecture, cyber risk, compliance, audit, operations, application owners, and business teams to deliver secure and scalable access management outcomes.
Strong operational leadership experience, including service management, process execution, metrics, work intake, issue prioritization, quality assurance, process improvement, and performance reporting.
Experience with application onboarding, access management intake processes, platform migration support, and operational readiness activities.
Understanding of emerging access governance needs related to AI-enabled applications, autonomous agents, machine identities, service accounts, APIs, and other non-human identity patterns.
Ability to translate control requirements, policy obligations, audit findings, and operational risks into practical execution plans and measurable outcomes.
Demonstrated ability to build collaborative working relationships with senior stakeholders across global, regional, and local teams.
Strong communication skills with the ability to present complex governance, risk, control, and operational topics clearly to executive, technical, audit, and business audiences.
Experience developing and using metrics to measure process effectiveness, control health, operational performance, remediation progress, and risk reduction.
Proven ability to lead organizational change, improve operating models, simplify processes, and drive disciplined execution across teams.
Experience engaging vendors, consultants, and third-party partners where needed to support governance, compliance, onboarding, automation, or operational improvement objectives.
Corporate Security ResponsibilityAll activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
In line with Mastercard's total compensation philosophy and assuming that the job will be performed in the US, the successful candidate will be offered a competitive base salary and may be eligible for an annual bonus or commissions depending on the role. The base salary offered may vary depending on multiple factors, including but not limited to location, job-related knowledge, skills, and experience. Mastercard benefits for full time (and certain part time) employees generally include: insurance (including medical, prescription drug, dental, vision, disability, life insurance); flexible spending account and health savings account; paid leaves (including 16 weeks of new parent leave and up to 20 days of bereavement leave); 80 hours of Paid Sick and Safe Time, 25 days of vacation time and 5 personal days, pro-rated based on date of hire; 10 annual paid U.S. observed holidays; 401k with a best-in-class company match; deferred compensation for eligible roles; fitness reimbursement or on-site fitness facilities; eligibility for tuition reimbursement; and many more. Mastercard benefits for interns generally include: 56 hours of Paid Sick and Safe Time; jury duty leave; and on-site fitness facilities in some locations.
Pay RangesArlington, Virginia: $244,000 - $390,000 USD
