Privacy Engineer

Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Privacy Engineer

Overview:
Mastercard is committed to balancing innovation while protecting individual privacy and has embraced privacy and data protection as core to the successful execution of our business strategy. As part of that commitment, Mastercard has established a world‑class privacy program and is adding talent to our global team.

The Privacy and AI Responsibility team is looking for a Privacy Engineer to drive our Privacy and Data Governance strategy forward by consistently innovating and problem‑solving. She/he is passionate about the customer experience journey, highly motivated, intellectually curious, analytical, and possesses an entrepreneurial mindset.

The Privacy Engineer will support Mastercard’s Services Division on the development and deployment of the Data Commercialization Platform (DCP). The DCP is the cloud‑based platform for hosting and performing analytics and AI modeling on all of Mastercard’s data products. The role will drive the organizational excellence on privacy preserving technological safeguards and support the organization’s compliance with global data laws, including the EU General Data Protection Regulation ("GDPR") and data privacy laws and regulations globally.

The Privacy Engineer ensures that thorough privacy engineering review is carried out in the context of data processing and AI modeling. She/he is responsible for identifying and implementing privacy requirements to enhance Mastercard privacy and security controls in partnership with Mastercard’s technology and business teams.
The position requires a strong understanding of the complex data, AI and privacy landscape, strong understanding of technology, and an ability to develop creative solutions to ensure compliance with privacy and data protection laws globally.
The position will report to the VP, Privacy Engineering.
The ideal candidate will have the ability to think and act strategically with respect to the needs of business clients and their objectives.

Conduct the technical review of Mastercard Data Platform processes and data products, including advising on privacy by design (PbD) controls such as deidentification techniques, privacy enhancing technologies and the governance of data and AI in cloud infrastructures.
Analyze technical designs and implementations, work with stakeholders to develop technical solutions to remediate and mitigate privacy risks in designs, procedures and processes.
Engage with technical and business teams on privacy engineering review to ensure that privacy requirements pertaining to data processing are carried out throughout Mastercard’s technology and product life cycle.
Partner with the privacy attorneys, technology and business teams to establish appropriate legal and technical safeguards such as Data Privacy Contracts and Usecase privacy assessments to foster privacy compliance across the company (including acquisitions).
Develop and organize technical and engineering controls to help demonstrate compliance with Mastercard’s PbD process and Binding Corporate Rules, anticipating questions from various stakeholders internally and externally.
Translate Privacy Risks following from Privacy Impact Assessments into technical and administrative PbD controls with a user‑first approach, driving execution across cross‑functional teams.
Identify opportunities to implement privacy guardrails and controls within business workflows and tech solutions, and to work with stakeholders to implement these guardrails and controls
Create concise requirements to automate privacy controls and compliance obligations.
Own the execution of regular privacy compliance assessments,…