Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Senior Regional Security Analyst Security Reporting & Automation Senior Analyst Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: - Abide by Mastercard's security policies and practices; - Ensure the confidentiality and integrity of the information being accessed; - Report any suspected information security violation or breach, and - Complete all periodic mandatory security trainings in accordance with Mastercard's guidelines.

• Responsible for the day-to-day administration, monitoring, and continuous improvement of Equity Resources' cybersecurity program • Serve as the technical lead for security operations, Microsoft 365 security, identity and access management, data protection, AI governance, vulnerability management, incident response, and enterprise network security while partnering with business stakeholders to protect company and customer information • Duties include Security Operations and Incident Response, Network Security, Microsoft 365 Security Administration, Data Protection, AI Governance, and Microsoft Purview, Identity and Access Management, Vulnerability and Risk Management, Compliance and Governance

• Work to protect corporate data and information, being responsible for the implementation, administration and evolution of Data Loss Prevention (DLP) and Data Governance solutions in the Microsoft ecosystem. • Implement, administer and maintain Data Loss Prevention (DLP) policies in Microsoft 365 environments and corporate devices. • Configure, review and optimize data protection policies using Microsoft Purview. • Continuously monitor events and alerts related to data protection, conducting incident analysis and investigations. • Identify and mitigate risks related to the leakage of confidential information. • Implement and administer sensitivity labels, classification and document protection policies. • Manage retention policies and information lifecycle (Data Lifecycle Management) and support Records Management initiatives. • Support eDiscovery, Communication Compliance and security audits when required. • Manage email protection capabilities using Microsoft Defender for Office 365.

• Act as a Data and Information Security Analyst with a technical and consultative focus on protecting sensitive data and information. • Responsible for implementing and maintaining classification, labeling and protection policies, as well as Data Loss Prevention (DLP) technologies and regulatory compliance, ensuring the secure lifecycle of information. • Work with Microsoft Information Protection, Microsoft Purview and Data Loss Prevention (DLP) to identify, classify and protect sensitive data across data infrastructures, endpoints, e-mail, SharePoint, Teams, OneDrive, etc. • Configure DLP policies based on financial, contractual and regulatory information (LGPD, SOX, PCI-DSS). • Continuously improve DLP policies based on events, false positives and exception cases. • Monitor DLP alerts, perform analysis and collaborate with incident response teams. • Support investigations conducted by other teams by providing technical input and context on DLP policies, classification rules and potential leakage vectors. • Work together with Data Stewards. • Conduct mapping, categorization and classification of critical/sensitive data. • Define and maintain OKRs and maturity indicators related to technical data governance and leakage prevention activities. • Demonstrate results through dashboards, executive reports and technical evidence. • Ensure compliance with standards and legislation such as LGPD, GDPR, SOX, HIPAA, PCI-DSS, ISO 27001:2022 and NIST. • Support internal/external audits with compliance evidence related to DLP, classification and governance. • Conduct trainings, workshops and awareness campaigns on secure use and classification of information.