Lead the threat intelligence function within a Security Operations Centre, setting proactive monitoring and alerting strategy. Produce intelligence reports and briefings, analyze threat actors, campaigns, dark and deep web activity, and critical vulnerabilities. Collaborate with SOC, security teams, customers, vendors, industry groups, government partners, and Mastercard’s global intelligence team. Maintain intelligence tooling, support threat hunting, and develop new intelligence services while maturing the overall capability.
Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Information Security Operations Analyst
Overview
This is an exciting position for a Lead Threat Intelligence Analyst to join Vocalink's dedicated Threat Intelligence function. You will be play an integral leading role in the Vocalink Threat Intelligence Team, working closely with the SOC and internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection.
Collaboration is at the heart of this position. You will work alongside Mastercard's global threat intelligence capabilities and engage proactively with a wide network of stakeholders, including vendors, industry groups, our customers, and government organisations.
This is a unique chance to help shape and grow a fast-evolving threat intelligence capability that serves Vocalink and its customers. If you are passionate about cyber security and eager to make an impact, this role offers an exciting platform to develop your leadership expertise and to help to grow and mature a threat intelligence function in a critical national infrastructure provider.
Role
Lead the day-to-day operations of the threat intelligence function within the Vocalink Security Operations Centre, setting the strategy for proactive monitoring and alerting to help protect Vocalink assets and identify emerging threats.
Deliver briefings and regular engagements with our customers and partners across the business.
Prepare and QC intelligence reports for teams across the wider security function, including the SOC, Identity and Access Management, Vulnerability Management, Insider Threat and Physical Security, highlighting emerging threats and critical vulnerabilities.
Collaborate with Mastercard's global threat intelligence team, supporting services that leverage Mastercard's scale and capabilities.
Optimise reporting through our threat intelligence platform by working with vendors and internal teams to deliver high quality curated feeds which enable effective threat hunting and remediation.
Engage with vendors, industry groups, and government partners to build and maintain strong intelligence-sharing relationships.
Communicate findings clearly and promptly to internal stakeholders, ensuring accuracy and completeness.
Maintain and improve intelligence tooling, working with vendors and users to ensure the tools operate effectively.
Drive the growth and maturing of the threat intelligence function, developing new products and services for our internal and external customers.
All About You
In this role you will need:
An advanced knowledge of cyber threat intelligence and the intelligence lifecycle, with a deep understanding of all-source intelligence principles.
Strong written and verbal communication skills in English, with the ability to present complex information clearly and concisely, including to senior audiences and under pressure.
A detailed understanding of attacker tools, techniques, and procedures (TTPs) and how they relate to threat actor behaviour.
A highly developed understanding of the current cyber threat landscape, including common threat actors, campaigns, and attack methodologies.
A strong understanding of key threat intelligence terminology, concepts, and analytical approaches.
Experience in analysis of dark and deep web ecosystems, including forums, leak sites, and threat actor communities.
To be adaptable and eager to learn new technologies, tools, and methodologies in a fast-paced environment.
The ability to work independently and take initiative, while also collaborating effectively and leading a team.
Developed knowledge of global security frameworks and standards, such as NIST, ISO and MITRE ATT&CK.
Strong analytical and problem-solving skills, with attention to detail and accuracy.
Strong technical proficiency, including familiarity with networking concepts, operating systems, and common security tools.
An interest in continuous professional development, including pursuing relevant certifications.
A developed understanding of geopolitical factors that impact and drive cyber risks.
A working understanding of financial market infrastructure.
Desirable Experience
Previous experience working in a Security Operations Centre (SOC) environment.
Exposure to threat hunting activities and familiarity with investigative techniques.
A good understanding or hands-on experience with malware analysis and related tools.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Lead Information Security Operations Analyst
Overview
This is an exciting position for a Lead Threat Intelligence Analyst to join Vocalink's dedicated Threat Intelligence function. You will be play an integral leading role in the Vocalink Threat Intelligence Team, working closely with the SOC and internal security teams to deliver actionable intelligence. You will support a diverse range of customers and contribute to key initiatives such as threat hunting, vulnerability management, and insider threat detection.
Collaboration is at the heart of this position. You will work alongside Mastercard's global threat intelligence capabilities and engage proactively with a wide network of stakeholders, including vendors, industry groups, our customers, and government organisations.
This is a unique chance to help shape and grow a fast-evolving threat intelligence capability that serves Vocalink and its customers. If you are passionate about cyber security and eager to make an impact, this role offers an exciting platform to develop your leadership expertise and to help to grow and mature a threat intelligence function in a critical national infrastructure provider.
Role
Lead the day-to-day operations of the threat intelligence function within the Vocalink Security Operations Centre, setting the strategy for proactive monitoring and alerting to help protect Vocalink assets and identify emerging threats.
Deliver briefings and regular engagements with our customers and partners across the business.
Prepare and QC intelligence reports for teams across the wider security function, including the SOC, Identity and Access Management, Vulnerability Management, Insider Threat and Physical Security, highlighting emerging threats and critical vulnerabilities.
Collaborate with Mastercard's global threat intelligence team, supporting services that leverage Mastercard's scale and capabilities.
Optimise reporting through our threat intelligence platform by working with vendors and internal teams to deliver high quality curated feeds which enable effective threat hunting and remediation.
Engage with vendors, industry groups, and government partners to build and maintain strong intelligence-sharing relationships.
Communicate findings clearly and promptly to internal stakeholders, ensuring accuracy and completeness.
Maintain and improve intelligence tooling, working with vendors and users to ensure the tools operate effectively.
Drive the growth and maturing of the threat intelligence function, developing new products and services for our internal and external customers.
All About You
In this role you will need:
An advanced knowledge of cyber threat intelligence and the intelligence lifecycle, with a deep understanding of all-source intelligence principles.
Strong written and verbal communication skills in English, with the ability to present complex information clearly and concisely, including to senior audiences and under pressure.
A detailed understanding of attacker tools, techniques, and procedures (TTPs) and how they relate to threat actor behaviour.
A highly developed understanding of the current cyber threat landscape, including common threat actors, campaigns, and attack methodologies.
A strong understanding of key threat intelligence terminology, concepts, and analytical approaches.
Experience in analysis of dark and deep web ecosystems, including forums, leak sites, and threat actor communities.
To be adaptable and eager to learn new technologies, tools, and methodologies in a fast-paced environment.
The ability to work independently and take initiative, while also collaborating effectively and leading a team.
Developed knowledge of global security frameworks and standards, such as NIST, ISO and MITRE ATT&CK.
Strong analytical and problem-solving skills, with attention to detail and accuracy.
Strong technical proficiency, including familiarity with networking concepts, operating systems, and common security tools.
An interest in continuous professional development, including pursuing relevant certifications.
A developed understanding of geopolitical factors that impact and drive cyber risks.
A working understanding of financial market infrastructure.
Desirable Experience
Previous experience working in a Security Operations Centre (SOC) environment.
Exposure to threat hunting activities and familiarity with investigative techniques.
A good understanding or hands-on experience with malware analysis and related tools.
Corporate Security Responsibility
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:
- Abide by Mastercard's security policies and practices;
- Ensure the confidentiality and integrity of the information being accessed;
- Report any suspected information security violation or breach, and
- Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.
Mastercard London, England Office




1 Angel Lane, London, United Kingdom, EC4R 3AB
Similar Jobs at Mastercard
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead UK SME specialist sales for wholesale trade, drive card-based B2B payment adoption and GDV growth by building pipeline, creating commercial cases, partnering with banks, fintechs and platforms, and engaging senior finance stakeholders to translate AR/AP pain points into card payment solutions.
Top Skills:
Account-To-Account PaymentsAccounting PlatformsCommercial CardsErpFinance Workflow PlatformsInvoicing Platforms
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Monitor system dashboards and alerts in a 24/7 Operations Command Centre, perform first-line incident investigation and resolution, escalate high-impact incidents, follow and improve operational procedures, work rotating shifts, and adhere to corporate security policies and trainings.
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Post-sale commercial owner for wholesale trade accounts: manage senior relationships, lead implementation and onboarding, drive adoption and GDV growth, coordinate cross-functional teams, run business reviews, and translate operational adoption into measurable outcomes.
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.





