Lead Platform Engineering - Patch Management

Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Platform Engineering - Patch Management
Overview
The Lead Platform Engineer will spearhead initiatives in Patch Management, Vulnerability Management, and Technical Security Testing (including internal vulnerability scanning using tools such as Qualys) across Mastercard NPP O&T Network platforms.
This role is pivotal in safeguarding critical services, ensuring compliance with SLAs, and maintaining high availability standards. Beyond operational excellence, the position demands strategic leadership, driving innovation and continuous improvement in platform security, efficiency, and resilience.
Key Responsibilities
- Leadership & Strategy
- Act as the primary authority and escalation point for patching, vulnerability management, and platform security posture.
- Define and implement strategic roadmaps for security and maintenance initiatives, aligning with organisational goals.
- Champion automation and process optimisation to enhance operational efficiency and reduce risk.
- Security Governance
- Lead vulnerability risk assessments and remediation strategies across complex environments.
- Oversee the planning and execution of system/platform updates to optimise security and compliance.
- Ensure proactive participation in Security Incident Management, driving root cause analysis and long-term fixes.
- Stakeholder Engagement
- Communicate effectively with senior stakeholders to raise awareness of vulnerabilities and mitigation plans.
- Provide executive-level KPI reporting and insights on platform security posture.
- Technical Excellence
- Maintain a holistic view of platform security, identifying risks, escalating concerns, and implementing robust control functions.
- Deliver technical guidance and mentorship to engineering teams, ensuring consistent deployment of secure solutions.
- Thought Leadership
- Engage with the broader technical community to anticipate emerging trends and recommend innovative solutions.
- Represent the team in internal forums, delivering presentations and knowledge-sharing sessions.
Required Experience
- Proven track record of leading major platform security initiatives, including patch and vulnerability management at scale.
- Expertise in security tools and frameworks (e.g., Qualys, CIS benchmarks, risk assessment methodologies).
- Experience driving process improvements and automation for operational and financial impact.
- Strong ability to partner with cross-functional teams, influencing decisions and ensuring timely project delivery.
- Demonstrated success as a trusted advisor and go-to expert, resolving complex infrastructure issues.
- Skilled in creating and delivering strategic presentations for senior leadership and technical audiences.
Preferred Skills
- Deep understanding of network and platform architecture within regulated environments.
- Familiarity with compliance standards (PCI DSS, ISO 27001) and risk management frameworks.
- Excellent communication, leadership, and stakeholder management skills.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard's security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.