Product manager in cyber risk

The Cyber Risk Quantification Product Manager role is designed for a candidate with strong experience in quantitative cyber risk analysis, FAIR-based methodologies, and product-oriented problem-solving. The role offers a unique opportunity to collaborate with leading cybersecurity, risk, product, analytics, and engineering experts within our cybersecurity products organization. The ideal candidate will combine cyber risk expertise, analytical rigor, and cross-functional collaboration skills to help develop clear, scalable, and defensible cyber risk quantification capabilities.

• Support the development, calibration, validation, and explanation of FAIR-based cyber risk quantification and ROI models, including FAIR, FAIR-CAM, and FAIR-MAM.
• Translate cyber risk quantification methodologies into clear product requirements, analytical logic, model assumptions, and user-facing explanations.
• Apply cybersecurity, threat, exposure, control, and financial-impact concepts to support practical cyber risk quantification use cases and model inputs.
• Work with product, engineering, analytics, cybersecurity, and risk stakeholders to refine requirements, validate assumptions, and support practical application of quantitative risk capabilities.
• Maintain clear documentation that explains how models work, what assumptions are used, and how results, recommendations, and analytical outputs should be interpreted.

• 5+ years of hands-on experience in cyber risk quantification, quantitative cyber risk assessment, or related cyber risk analytics roles.
• Practical experience applying FAIR-based methodologies, including FAIR, FAIR-CAM, or FAIR-MAM, to cyber risk scenarios, assessments, or product use cases.
• Experience building, calibrating, validating, or explaining quantitative risk models, including model assumptions, inputs, outputs, and limitations.
• Strong understanding of model governance, validation, documentation, assumptions management, explainability, and methodology defensibility for quantitative cyber risk models.
• Strong foundation in statistics, probability, financial impact estimation, and ROI analysis, with the ability to apply these skills to cyber risk quantification.
• Working knowledge of cybersecurity and risk management frameworks such as NIST, ISO 27000-series standards, MITRE ATT&CK, exposure management concepts, and related standards.
• Experience working with product, engineering, analytics, cybersecurity, or risk teams to translate analytical concepts into practical product requirements and supporting documentation.
• Strong analytical, problem-solving, communication, collaboration, and project management skills, with the ability to balance structured execution and creative thinking.
• Fluent in English, with the ability to explain complex cyber risk concepts clearly to both technical and non-technical audiences.
• Abide by Mastercard’s security policies and practices;
• Ensure the confidentiality and integrity of the information being accessed;
• Report any suspected information security violation or breach, and
• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
• Будет плюсом: Experience applying FAIR-based methodologies in enterprise, consulting, or product environments is an advantage; Experience with cyber threat intelligence, exposure management, vulnerability management, control effectiveness analysis, or cyber loss data is an advantage

• Условий в вакансии нет