Cyber Security Engineer - Sr. Consultant level - Regulatory, Audit, & Compliance
Visa9 months ago
Foster City, California, United States
Hybrid
Full-time
Junior Level (1-3 years)
Job Description
Position Overview
Visa, a world leader in payments and technology, is seeking a leadership professional to join its Cybersecurity Regulatory, Audit, and Compliance function within the GRC team. Reporting to the Senior Director, you will oversee and coordinate regulatory operations, internal and external audits, and manage technical requests from regulators across multiple regions. You will also build, implement, and optimize scalable solutions that transform regulatory and audit requirements into automated processes, ensuring efficiency and operational excellence. This is a hybrid role, with office days confirmed by your hiring manager.
Key Responsibilities
- Oversee and manage audits, compliance, and regulatory activities related to Cybersecurity, including adherence to frameworks such as FBA/FFIEC, GLBA, SSAE16/ISAE3402, SOC 2, PCI-DSS, Sarbanes-Oxley (SOX), ISO, NIST, COSO, COBIT, and others.
- Collaborate with Cybersecurity, Technology, Compliance, Audit, and HRIS teams to automate manual tasks and ensure continuous audit readiness.
- Regularly review and apply emerging technologies – including AI and machine learning – to enhance automation, efficiency, and risk management within Regulatory, Audit, and Compliance functions.
- Build intuitive dashboards and reporting capabilities that provide real-time visibility into the risk and compliance posture of critical business systems.
- Advise Cybersecurity leadership on technology risk and compliance issues based on comprehensive assessments and monitoring results.
Required Qualifications
- 8+ years of relevant work experience with a Bachelor's degree; or at least 5 years with an Advanced Degree (e.g., Masters, MBA, JD, MD); or 2 years with a PhD; or 11+ years of relevant work experience.
Preferred Qualifications
- Advanced Degree (e.g., Masters, MBA) in a related field preferred.
- Bachelor’s degree in Computer Science, Information Systems, Management Information Systems, Business Administration, or a related field; significant technical experience may substitute for degree requirements.
- 8-10 years of leadership experience in Information Security, Audit, Risk, and/or Compliance, with expertise in security policy areas including PCI-DSS, NIST, COSO, COBIT, FFIEC, SOX, SSAE16/ISAE3402, SOC 2, etc.
- Experience in implementing and integrating enterprise GRC solutions (e.g., AuditBoard), including system integrations and platform administration.
- Hands-on experience with workflow automation, APIs, scripting, or low-code/no-code tools.
- Proven ability to collaborate with stakeholders and communicate effectively at the executive level.
- Familiarity with using Artificial Intelligence tools to drive efficiency and innovation.
- Certifications such as CISSP, CISA, CISM, CEH, or PCI QSA/ISA are preferred.
Benefits & Perks
- Compensation: USD 174,500.00 to 253,200.00 per year with potential bonus, equity, and sales incentive payments.
- Benefits: Comprehensive benefits package including Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and a Wellness Program.
- Hybrid work arrangement (office days as determined by the hiring manager).
- Travel: Approximately 5-10% travel requirement.
Required Skills
PCI-DSS
SOX
COBIT
Stakeholder Communication
Leadership
Workflow Automation
Cybersecurity Regulatory, Audit & Compliance
Regulatory Operations
NIST
ISO Compliance
Risk Management
Artificial Intelligence in Automation
Audit Management
API Integration
GRC Implementation
Data Analysis