Technology Risk Management Associate

Company Description

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Job Description

Visa is seeking a Controls Monitoring & Testing Associate within its Technology Risk Management program to review and assess Cybersecurity and Technology risks. The candidate will perform Risk Assessments, Design Effectiveness Assessments, and Operational Effectiveness Testing for key technology threat vectors such as security configuration management, firewall configuration, application, user access management, and availability & reliability. Responsibilities include managing stakeholder engagement plans, participating in process walkthroughs, tracking/reporting deliverables, and producing high-quality work papers for all lines of defense and risk stakeholders. Additionally, the candidate will interpret data from source systems to perform statistical sampling and aggregate assessment across various risk management levers, collaborate with technology partners, and distill information into management and executive-level reporting.

Key Responsibilities:

Technology:

• Perform independent technology and cybersecurity controls testing.
• Document testing results in detailed workpapers.
• Prepare management reports based on testing outcomes.
• Communicate findings with stakeholders.

Automation for Continuous Monitoring:

• Develop automation for continuous controls monitoring/auditing for technology and cybersecurity.
• Monitor the results of automated controls, perform investigation and follow-ups as needed. 

Risk & Control Self-Assessment (RCSA):

• Execute RCSA Risk Business Partner (RBP) controls quality review and sample-based testing.
• Conduct Key Risk Indicator (KRI) testing.

Training, Metrics Alignment & Reporting:

• Develop and track risk management training.
• Align metrics with reporting dashboards.
• Develop reporting and stakeholder communication.

This is a hybrid position. Expectation of days in office will be confirmed by your Hiring Manager.

Qualifications

Basic Qualifications:

• Minimum of 6 months of work experience or a Bachelor's Degree

Preferred Qualifications:

• 2 or more years of work experience
• Bachelor’s degree with 2-3 years of work experience in technology risk controls, or equivalent.
• Proven experience testing System Availability and Disaster Recovery controls, including evaluating failover and recovery procedures.
• Strong SDLC knowledge with control testing in Agile or DevOps environments.
• Skilled in validating Service Reliability and Operational Excellence controls for resilience.
• Practical experience with infrastructure and platform controls, such as high-availability, load balancing, and automated scaling configurations.
• Able to assess monitoring and alerting systems to ensure effective management and prevent service issues.

Additional Information

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel 5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.  Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is 88