Description
The Cyber Risk Quantification Product Manager role is designed for a candidate with strong experience in quantitative cyber risk analysis, FAIR-based methodologies, and product-oriented problem-solving. The role offers a unique opportunity to collaborate with leading cybersecurity, risk, product, analytics, and engineering experts within our cybersecurity products organization. The ideal candidate will combine cyber risk expertise, analytical rigor, and cross-functional collaboration skills to help develop clear, scalable, and defensible cyber risk quantification capabilities.
Responsibilities
•Support the development, calibration, validation, and explanation of FAIR-based cyber risk quantification and ROI models, including FAIR, FAIR-CAM, and FAIR-MAM.
•Translate cyber risk quantification methodologies into clear product requirements, analytical logic, model assumptions, and user-facing explanations.
•Apply cybersecurity, threat, exposure, control, and financial-impact concepts to support practical cyber risk quantification use cases and model inputs.
•Work with product, engineering, analytics, cybersecurity, and risk stakeholders to refine requirements, validate assumptions, and support practical application of quantitative risk capabilities.
•Maintain clear documentation that explains how models work, what assumptions are used, and how results, recommendations, and analytical outputs should be interpreted.
Requirements
•5+ years of hands-on experience in cyber risk quantification, quantitative cyber risk assessment, or related cyber risk analytics roles.
•Practical experience applying FAIR-based methodologies, including FAIR, FAIR-CAM, or FAIR-MAM, to cyber risk scenarios, assessments, or product use cases.
•Experience building, calibrating, validating, or explaining quantitative risk models, including model assumptions, inputs, outputs, and limitations.
•Strong understanding of model governance, validation, documentation, assumptions management, explainability, and methodology defensibility for quantitative cyber risk models.
•Strong foundation in statistics, probability, financial impact estimation, and ROI analysis, with the ability to apply these skills to cyber risk quantification.
•Working knowledge of cybersecurity and risk management frameworks such as NIST, ISO 27000-series standards, MITRE ATT&CK, exposure management concepts, and related standards.
•Experience working with product, engineering, analytics, cybersecurity, or risk teams to translate analytical concepts into practical product requirements and supporting documentation.
•Strong analytical, problem-solving, communication, collaboration, and project management skills, with the ability to balance structured execution and creative thinking.
•Fluent in English, with the ability to explain complex cyber risk concepts clearly to both technical and non-technical audiences.
•Abide by Mastercard's security policies and practices; ensure the confidentiality and integrity of the information being accessed; report any suspected information security violation or breach; complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Nice to have
•Experience applying FAIR-based methodologies in enterprise, consulting, or product environments is an advantage.
•Experience with cyber threat intelligence, exposure management, vulnerability management, control effectiveness analysis, or cyber loss data is an advantage.
Conditions
No conditions stated in the posting.
