Principal Information Security Engineer - Blockchain Technology

About Mastercard and the Role

Mastercard is a global tech leader in payments with a mission to create an inclusive digital economy accessible worldwide by ensuring transactions are secure and efficient. Operating in over 210 countries, Mastercard values sustaining a world of opportunities for all. Within Corporate Security, the focus is on protecting the organization from cyber and physical risks through dedicated professionals. This opportunity is for a Principal Information Security Engineer to enhance security posture for Mastercard’s Crypto Products and Blockchain Networks, ensuring robust, scalable payment ecosystems.

Key Responsibilities

• Develop and implement security frameworks, standards, and architectural guidelines tailored to large-scale blockchain platforms.
• Formulate and drive the long-term security strategy specifically for blockchain networks supporting crypto products.
• Lead threat modeling exercises, perform risk assessments, and conduct security design analyses for fast-paced, highly available systems.
• Assist in designing and deploying complex security measures meeting regulatory, operational, and customer standards.
• Identify security risks in blockchain transaction flows and propose effective compensatory controls.
• Collaborate with engineering teams to integrate security practices into automated pipelines, APIs, cloud infrastructure, and blockchain components.
• Act as a trusted security advisor to engineering and business stakeholders across blockchain initiatives.
• Mentor junior engineers and contribute to their professional growth and performance evaluations.
• Maintain productive relationships with business leaders, product managers, project teams, customers, and senior executives.
• Communicate security concepts clearly to both technical and non-technical audiences.
• Represent Mastercard’s Corporate Security interests in blockchain-related projects, regulatory matters, and multidisciplinary groups.

Qualifications and Experience

• Undergraduate degree in Computer Science, Information Security, or equivalent with extensive experience (10-15 years) in information security roles.
• Demonstrated leadership and influence in IT security environments with a history of supporting business goals through sound technical decisions.
• Strong communication skills capable of negotiating and aligning global teams.
• Relevant security certifications like CISSP or CISM preferred.
• Expertise in security engineering, including risk evaluation and designing controls.
• Solid understanding of blockchain security principles and related cryptography such as encryption, hashing, and digital signatures.
• Experience with blockchain security or Secure Software Development Lifecycle (SDLC) methodologies is valuable.
• Knowledge of compliance frameworks such as SOC 2, PCI DSS, DORA, or Cyber Risk Institute profiles, with ability to map these frameworks onto technical environments.
• Experience working with audit, compliance, and regulatory teams to align security practices with policies and regulations.
• Ability to analyze control effectiveness, identify gaps and implement remediation balancing security with operational efficiency.

Corporate Security Responsibilities

• Adhere strictly to Mastercard’s information security policies and standards.
• Ensure that confidentiality and integrity of data accessed are maintained.
• Promptly report suspected security incidents or breaches.
• Complete all mandatory security-related training as directed by Mastercard guidelines.