Senior Analyst, Risk Management (CPA, CIA, CISA)

$82,000 - $127,000/Yr

Mastercard - O'Fallon, MO

Full-time - Entry Level

O'Fallon, MO

Credit Intermediation and Related Activities

About the position

The Senior Analyst, IT Risk Management at Mastercard will support the SOX Compliance program within the Finance Organization. This role focuses on scoping and evaluating IT controls, managing various aspects of the program, and collaborating with multiple stakeholders to ensure effective risk management practices. The position requires a strong understanding of IT control frameworks and the ability to drive change and improve awareness across the organization.

Responsibilities

• Support the execution of various SOX program components, including IT scoping, IT risk assessment, and training of stakeholders on IT control-related best practices.
• Assess and determine design effectiveness of IT controls.
• Assist with the formalization of SOX processes as part of SOX readiness efforts.
• Work with business owners to address any potential control gaps that may require remediation.
• Partner with various business owners and IT teams to provide expertise in assessing the design and effectiveness of IT controls.
• Evaluate information produced by entity (IPE) for completeness and accuracy.
• Review third-party vendor attestation and audit reports, providing feedback to business leaders and risk owners.
• Liaise with regional financial and IT stakeholders as well as internal and external auditors.
• Ensure the delivery of high quality, timely work products.
• Continuously identify efficiencies in the SOX program and opportunities for optimization of financial and operational processes and controls.
• Exhibit strong project management skills with the ability to work independently and hold self and others accountable to deadlines.

Requirements

• CPA, CISA or equivalent certification required.
• Extensive knowledge of IT general and application controls.
• Strong understanding of IT control frameworks such as COBIT, NIST Cybersecurity, NIST SP 800-53, CIS/SANS Top 20.
• Familiarity with SEC/PCAOB regulations, COSO, and US GAAP.
• Demonstrated ability to monitor an effective global risk-based IT control environment.
• Recent experience providing IT auditing or IT advisory-type services.
• Knowledge of best practices around IT controls.
• Working knowledge of current PCAOB Auditing and Accounting Standards.
• Experience with IT external audit or risk advisory services or in-house Technology Risk Management.
• Knowledge of common enterprise and web application technologies.

Nice-to-haves

• Familiarity with audit automation preferred.
• Experience in risk management field (e.g., risk management, audit, compliance) desired.

Benefits

• Insurance (including medical, prescription drug, dental, vision, disability, life insurance)
• Flexible spending account and health savings account
• Paid leaves (including 16 weeks new parent leave, up to 20 paid days bereavement leave)
• 10 annual paid sick days
• 10 or more annual paid vacation days based on level
• 5 personal days
• 10 annual paid U.S. observed holidays
• 401k with a best-in-class company match
• Deferred compensation for eligible roles
• Fitness reimbursement or on-site fitness facilities
• Eligibility for tuition reimbursement
• Gender-inclusive benefits