At Lyft, our purpose is to serve and connect. We aim to achieve this by cultivating a work environment where all team members belong and have the opportunity to thrive. We’re looking for a proactive, collaborative Manager of Internal Audit to help execute our internal audit program and support Lyft’s governance, risk management, and compliance efforts. This role will focus on both business and technology audits, helping identify and address key risks while delivering insights that enable informed decision-making. Reporting to the Director of Internal Audit, and based in our San Francisco HQ, you’ll work closely with stakeholders across the company to strengthen controls, improve processes, and drive continuous improvement. Responsibilities: Audit Execution & Risk-Based Planning Execute audit and advisory engagements spanning across both technology (e.g. cybersecurity, data governance, infrastructure, etc.) and business (e.g. operations, compliance, etc.) domains from end to end — including planning, fieldwork, testing, and reporting. Perform annual risk assessment over assigned risks to develop and refine the annual risk-based audit plan. Take a hands-on approach to audits, ensuring findings are data-driven, relevant, and aligned with business objectives. Use process improvement techniques (e.g. process mapping, root cause analysis, gap assessments) to identify opportunities for enhanced control design and operational efficiency. Perform risk assessments and identify areas for process improvement, control enhancement, or technology enablement. Ensure timely and effective follow-up on remediation of audit findings, coordinating with business owners to verify resolution. Collaborate with cross-functional teams — including Engineering, Security, Legal, Finance, and Compliance — to assess risks and test key controls. Stay current on evolving risks related to emerging technologies, regulatory changes, and internal initiatives. Enterprise Risk Management (ERM) Support
Salary not disclosed
Check market pay for comparable Risk Management Director roles before applying.
Role overview
Job description
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Director, Risk ManagementOverview:Mastercard is a global technology company in the payments sector. We power payments and provide products and services for individuals and industries all around the world. Our people, technology, data and brand provide the capabilities that drive our success. We believe in connecting people to priceless possibilities.
As a company, we know that our success is driven by the skills, experience, integrity and mindset of the talent we hire. By building an inclusive, world-class culture, our employees have once-in-a-career opportunities to be a part of teams that have a greater impact on our community and our world. We invite you to join our team to find out how you too can start something priceless.
Role Description:
The Digital Asset Risk & Compliance team is looking for a Director, Operational Risk & Controls to help build and operate Mastercard’s Second Line operational risk and control capabilities for digital assets.
The role will establish a consistent approach to identifying, assessing, monitoring and reporting operational risks across Mastercard’s digital asset strategy, products and operations. The Director will partner with the First Line to establish and maintain effective controls, risk and control self-assessments, control testing and monitoring in line with Mastercard policies and standards.
The Director will also support BVNK’s integration into Mastercard by aligning operational risk frameworks, controls, governance and reporting while preserving the ability of the business to grow and innovate.
Role:
Digital Asset Operational Risk & Controls
• Build and operate the operational risk and controls capability for Digital Assets and BVNK.
• Partner with the First Line to identify material operational risks and establish effective controls, monitoring, and escalation.
• Lead risk assessments, RCSAs, control reviews, and issue management across digital asset products, operations, technology, and third-party providers.
• Assess control effectiveness and identify emerging risks, control weaknesses, and opportunities for improvement.
• Establish practical and scalable approaches to monitoring, testing, reporting, and remediation
Governance, Reporting & Business Partnership
• Integrate operational risk considerations into strategy, product development, operating model decisions, and business growth.
• Establish governance and reporting that provides management with a clear view of risks, controls, issues, and required actions.
• Partner across Product, Technology, Operations, Finance, Compliance, Security, and Risk to support responsible growth.
• Provide independent challenge while helping the business develop practical and scalable solutions.
• Promote a strong risk and control culture across Mastercard and BVNK.
BVNK Integration
• Build the long-term operational risk and controls capability for Digital Assets as part of BVNK's integration into Mastercard.
• Assess current-state practices and identify priority enhancements based on business growth, risk profile, and regulatory expectations.
• Align governance, RCSAs, control monitoring, testing, issue management, and reporting with Mastercard standards.
• Track integration commitments and remediation plans through completion.
• Drive simplification, scalability, and automation of operational risk and control activities.
All About You:
• Experience in Operational Risk, Controls, Audit, Compliance, Risk Management, or a related discipline.
• Demonstrated ability to build and enhance risk and control frameworks, including risk assessments, controls, testing, monitoring, and issue management.
• Strong understanding of Second Line oversight, independent challenge, governance, and risk appetite.
• Ability to identify material risks, assess control effectiveness, and drive practical improvements.
• Experience partnering across business, product, operations, technology, and risk functions.
• Strong stakeholder management and ability to influence without direct authority.
• Ability to simplify complex issues and translate them into clear actions, decisions, and reporting.
• Comfortable operating in ambiguity, building new capabilities, and driving execution.
• Interest in digital assets, payments, fintech, and emerging financial technologies.Mastercard is a merit-based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law. We hire the most qualified candidate for the role. In the US or Canada, if you require accommodations or assistance to complete the online application process or during the recruitment process, please contact [email protected] and identify the type of accommodation or assistance you are requesting. Do not include any medical or health information in this email. The Reasonable Accommodations team will respond to your email promptly.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Abide by Mastercard’s security policies and practices;
Ensure the confidentiality and integrity of the information being accessed;
Report any suspected information security violation or breach, and
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Pay Ranges
Toronto, Canada: $138,000 - $221,000 CADWhat they are looking for
Skills & requirements
Qualification
We hire the most qualified candidate for the role
Hiring company
Mastercard
View the company profile, current openings and hiring details.
Related opportunities
Similar active roles
Relevant, currently active roles for this market.
C$150K – C$170K/yr
🔔 Get job alerts
New Director, Risk Management jobs in Toronto, Ontario, Canada, straight to your inbox.
No spam · Unsubscribe anytime