Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Principal Information Security Engineer - Blockchain Technology
Who is Mastercard?
Mastercard is a global technology company in the payments industry. Our mission is to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart, and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments, and businesses realize their greatest potential.
Our decency quotient, or DQ, drives our culture and everything we do inside and outside of our company. With connections across more than 210 countries and territories, we are building a sustainable world that unlocks priceless possibilities for all.
Mission First, People Always
As Corporate Security, we are responsible for keeping Mastercard safe and secure from cyber and physical threats, and it is our people on the frontlines who make this happen every day.
By taking care of our people, their wellbeing, and career development, we provide them the necessary tools and environment to ensure the success of our mission.
Overview
Mastercard is seeking a Principal Information Security Engineer to support Mastercard’s Crypto Products and Solutions Blockchain Networks platforms. This role is ideal for a security leader who thrives in fast moving, high availability environments and is passionate about building secure, scalable, and resilient payment ecosystems.
You will drive the security roadmap for the Crypto Products and Solutions Blockchain Networks program, partnering closely with engineering, product, and global business teams to ensure our blockchain services meet the highest standards of security, compliance, and customer trust. You will influence architecture, guide security-by-design practices, and help shape the future of Mastercard’s international payment capabilities.
Role
As a Principal Information Security Engineer supporting Crypto Products and Solutions Blockchain Networks, you will:
Security Architecture & Strategy
- Influence and implement security requirements, standards, and architectural patterns for large scale, Crypto Products and Solutions Blockchain Networks platforms.
- Define platform level security architecture and drive execution of long term security strategy for Crypto Products and Solutions Blockchain Networks.
- Lead threat modelling, risk assessments, and security design reviews for high velocity, high availability systems.
Engineering & Delivery
- Support the design, testing, and implementation of complex security solutions aligned with regulatory, operational, and customer requirements.
- Identify risks and propose compensating controls tailored to blockchain transaction flows and blockchain environments.
- Partner with engineering teams to embed security into CI/CD pipelines, APIs, cloud services, and blockchain processing components.
Leadership & Influence
- Serve as a trusted advisor to engineering and business leaders across Crypto Products and Solutions Blockchain Networks programs.
- Apply deep technical expertise to mentor and develop junior engineers and security practitioners.
- Provide input into performance evaluations for team members and emerging talent.
Stakeholder Engagement
- Build and maintain strong relationships with business owners, product teams, engineers, project managers, customers, and senior leadership.
- Translate security concepts into actionable guidance for diverse technical and non technical audiences.
- Represent Corporate Security in Crypto Products and Solutions Blockchain Networks initiatives, regulatory discussions, and cross functional working groups.
All About You
You are an experienced security leader with a passion for enabling secure, blockchain services. You bring:
Technical & Leadership Experience
- Undergraduate degree preferably in computer science/information security or work experience equivalent of 10-15 years in information security disciplines.
- Extensive IT experience demonstrating thought leadership and cross functional influence.
- Proven success enabling business outcomes through strong technical decision making.
- Experience influencing project teams and collaborating with business partners, vendors, and consulting organisations.
- Excellent communication skills, with the ability to influence, negotiate, and drive alignment across global teams.
- CISSP/CISM or industry recognised security certification an advantage.
Security Engineering Expertise
- Strong background in information security engineering, including risk identification and compensating control design.
- Knowledge of blockchain security principles and ability to reflect them as security requirements
- Strong understanding of cryptography concepts e.g. symmetric/asymmetric encryption, hashing, digital signatures, including their application in blockchain technologies
- Experience supporting or securing blockchain solutions, is highly beneficial.
- Experience in Secure-SDLC processes and their support across development teams highly beneficial
Risk & Compliance Framework Expertise
- Demonstrated experience working with risk based security and compliance frameworks, including SOC 2, PCI DSS, DORA, and the Cyber Risk Institute CRI profiles, or other relevant regulatory or industry standards.
- Ability to understand, interpret and apply security related frameworks across complex technology environments.
- Experience collaborating with audit, compliance, and regulatory teams to ensure alignment between security controls, business processes, and external obligations.
- Proven capability to assess control effectiveness, identify gaps, and drive remediation strategies that balance security, operational efficiency, and business needs.
Corporate Security Responsibility
Every person working for, or on behalf of, Mastercard is responsible for information security. All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and therefore, it is expected that the successful candidate for this position must:
- Abide by Mastercard’s security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
