OverviewThe Mastercard Supervision & Controls (S&C;) team is looking for a Director, Legal Compliance and Risk (2nd Line) who will be an active participant of the Supervision & Controls team for Recorded Future and provide support on the execution of risk mitigants. The role will engage with senior leaders in the business and second line functions (both at Recorded Future and at Mastercard) to ensure identified risks are appropriately mitigated, and that any potential new risks are identified and managed proactively.
Role Responsibilities
Monitoring Adherence to Business Mitigation Controls: Oversee and ensure strict adherence to established business mitigation controls and related processes for Recorded Future and Mastercard.
Track, manage and monitor the documentation of controls and risk mitigation plans in a centralized repository. Facilitate reporting, updates, and any escalations as needed.
Validate the execution of risk mitigation plans identified as part of the Risk Register and the Intercompany agreement.
Administer and monitor access controls for new joiners, movers, and leavers, including flagging employees to ensure appropriate access is granted.
Review access to applications with Recorded Future data and monitor data inputs to ensure adherence to data controls.
Respond to breaches of controls or compliance, escalating incidents as necessary to ensure timely and effective resolution.
Develop and deliver training initiatives focused on business mitigation controls for both Recorded Future and Mastercard staff, increasing awareness and understanding of compliance requirements.




Test the design and operating effectiveness of business mitigation controls using a risk‑based control testing approach.
Monitor Legal and Regulatory controls and compliance with applicable requirements/controls: Deliver reporting on Recorded Future’s compliance with applicable legal and regulatory requirements including sanctions, anti‑money laundering, and FCPA.
Provide regular reporting to senior leadership on the progress of the mitigation of Top Risks.
Collaborate on intercompany agreement (ICA) updates to ensure that it is up to date and reflects the current business operations and controls for Recorded Future.
Coordinate on US government contracting obligations with assigned individuals.
Validate that product legal checkpoints are occurring related to various legal risks for synergy products.
Monitor Risk Policies and Processes: Continuously monitor Recorded Future’s compliance with risk policies and processes, ensuring that policies have been adopted appropriately.
Provide Risk and Legal Compliance reporting as needed, including reviewing the reports to ensure that only the necessary and appropriate data is included.
Monitor changes in the business that may warrant changes in controls or processes to continue to meet controls and requirements set forth in guidance provided by Legal, Privacy, and Compliance.




Oversee the execution of Risk and Control Self‑Assessments (RCSAs) for Recorded Future.
Oversee the execution of Enterprise Risk Assessments for Recorded Future.
All About You
10+ years risk management and controls assurance experience in a large multinational with a mature Risk function and program or in Corporate Law.
Knowledge of legal compliance (e.G., FCPA, Sanctions, AML) and risk management practices (e.G., Enterprise Risk, Technology Risk, Operational Risk).
Ability to collaborate cross‑functionally to drive outcomes.
Robust interpersonal skills and ability to influence at all levels including outside his / her / their reporting lines.
Experience in deliverable development for Board / Executive‑level presentations.
Articulate and highly effective communicator (written, oral, presentation).
Excellent analytical, problem‑solving and critical‑thinking skills;

keen attention todetail.
Ability to work under pressure, in sometimes ambiguous circumstances.
Knowledge of the cybersecurity industry and products, competitive environment, consumer trends, and economic environment.
Corporate Security Responsibility
Abide by Mastercard’s security policies and practices.
Ensure the confidentiality and integrity of the information being accessed.
Report any suspected information security violation or breach.
Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.
Pay RangesToronto, Canada: $138,000 - $221,000 CAD
Mastercard is a merit‑based, inclusive, equal opportunity employer that considers applicants without regard to gender, gender identity, sexual orien

📌 Director, Legal Compliance And Risk (Toronto)
🏢 Mastercard
📍 Toronto