Manager, Operational Risk & Controls - Europe

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Manager, Operational Risk & Controls - Europe Manager, Operational Risk & Controls - Europe Location: Pune, India Overview: The Manager, Operational Risk & Controls– Europe strengthens Mastercard Europe’s (MCE) risk posture by providing independent 2LoD oversight and challenge across high operational risk processes spanning both technology and non-technology domains. The role drives consistent application of the ORC framework (risk identification & assessment, control identification & evaluation, and ongoing management & monitoring), and supports MCE’s regulatory obligations (i.e. SIPS, PISA, CROE). Role Scope: • Regional coverage: Mastercard Europe S.A. (MCE) • Risk domains: Operational (incl. tech, process, people), legal & regulatory, third-party/outsourcing interfaces, and other topics relevant to European supervision. • Regulatory context: Role contributes to ongoing readiness against regulatory expectations to comply with SIPS, PISA and CROE requirements, supporting alignment with supervisory themes (e.g., cyber/operational resilience expectations). • Key relationships: ORC (Operational Risk and Controls) Global Function, 1LoD business and technology owners; 1LoD and 2LoD Tech Risk and Corporate Security; TPRM; Finance/Controllership; Regulatory Affairs; Internal Audit; MCE risk governance committees (TRC/BRCC/Board Risk Committee). Key responsibilities: Framework execution & oversight • Champion application of the ORC Framework’s three pillars (Operational Risk Identification & Assessment; Controls Identification & Evaluation; Risk & Controls Management and Monitoring) across Europe; provide independent oversight, challenge, and guidance to 1LoD. • Facilitate/oversee RCSAs (Risk and Control Self Assessments) and risk & control register for high operational risk processes (HORPs); ensure risks, controls, issues, risk events and treatments are captured and maintained to ORC standards. • Review control designs, effectiveness assessment and control testing results; escalate significant control gaps and delays, and track remediation through closure. • Support the maintenance of a Europe tech and non-tech control framework including control testing, in partnership with Group ORC and first line teams, including tech risk management and Corporate Security functions, that meet EU regulatory expectations Technology & non-technology coverage