Vice President, Technology Risk

Company Description

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Job Description

Technology & Cyber Risk (TCR) is a Global Risk group that is tasked with deploying various programs that support Visa’s objective of strong risk management and regulatory compliance.  The Technology and Cyber Risk programs drive processes that enable Visa to identify, assess and manage availability & reliability as well as data security risks.  Through the deployment of these programs, the TCR team also provides 2nd line challenge and oversight of these risks.
 

The programs consist of various components that build on a core foundation of Risk Control Self-Assessments (RCSAs), that are deployed across Technology.  This team also operates the Governance processes providing oversight, risk assessment and adjudication of Visa’s Key Controls.  This includes the management of various working groups that involve stakeholders across Technology, Cyber, Risk and other functions.  In addition, TCR is responsible for 2nd line monitoring & testing of Technology and Cyber controls, while continuing to drive automation and leverage AI/Technology in control monitoring.  .  TCR performs risk assessments of various domains across Technology, on a risk-based basis, and will as appropriate lead or participate in lessons learned reviews following technology incidents.  Lastly, the VP TCR will work closely with Model Risk Management as it relates to the 2nd line oversight and monitoring of risks related to deployment of AI systems.
 

The person in this role will lead the TCR risk program for Visa, including the overall design and deployment. The VP leads the engagement with Technology teams and leadership, represents the program to external stakeholders (such as regulators) and defines the Program parameters, focused on driving for effective outcomes.  The person in this role will ensure program policies, procedures, and controls are executed consistently across all Visa regions.  

Essential Functions

• Lead the Technology & Cyber Risk Program and Team, including designated staff at the Risk Center of Excellence
• Develop, maintain, and enhance the deployment of the RCSA program across the Visa Technology and Cyber organization, and ensure availability & reliability as well as data security risks are identified in a timely and adequate manner
• Maintain the Visa Technology Risk Framework, and any related Visa Policies and Procedures and develop well designed training and communication materials
• Partner with the Technology on the risk assessment of Technology and Cyber domains, on a risk-prioritized basis.
• Prioritize controls to be subject to 2nd line control monitoring & testing, and continue to develop and enhance automation of control monitoring
• Identify, develop and lead the deployment of AI tools that can assist, augment or automate 2nd line risk control programs
• Work closely with Technology leaders on periodic assessment technology incidents and ensure proper remediation and issue management
• Represent the Technology & Cyber risk program to the FFIEC and other regulators across different markets as required
• Engage on regular basis with regional Risk teams and own the execution of the activities performed in support of regional risk oversight
• Implement governance and oversight of program management, including design and maintenance 
• Build-out required program MIS, KRIs and overall reporting packs.  Provide input into the further design and enhancements of our enterprise risk platforms
• Stay engaged with market practices, and identify best practices in the further evolution of Operational and Compliance risk
• Oversee budget of TCR

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office two days a week, Tuesdays and Wednesdays with a general guidepost of being in the office 50% of the time based on business needs.

Qualifications

Basic Qualifications:
• 12 or more years of work experience with a Bachelor’s Degree or at least 10 years of experience with an Advanced degree (e.g. Masters/ MBA/JD/MD) or at least 8 years of work experience with a PhD<