Analyst, Technology Risk Management at Visa

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

This role supports the Technology Risk Management (TRM) organization by balancing hands‑on technology control monitoring and testing with ownership of the TRM execution plan. The Analyst is responsible for ensuring that control monitoring and testing activities are executed effectively while also driving disciplined planning, tracking, and delivery of TRM commitments.
The role works closely with Technology teams and Risk stakeholders to understand technology risks, evaluate control effectiveness, execute monitoring and testing activities, and ensure remediation actions progress in line with the TRM execution plan. This is a hands‑on, execution‑focused role that requires strong ownership, sound judgment, and the ability to manage multiple risk and control workstreams concurrently.

Key Responsibilities:

Technology Risk & Control Ownership:

• Develop a working understanding of technology platforms, systems, and architectures to identify key risk exposures
• Evaluate whether technology controls appropriately mitigate identified risks, considering both design and operating effectiveness
• Identify control gaps, weaknesses, or inconsistencies, and support remediation discussions with Technology teams
• Support ongoing technology risk assessments (e.g., RCSA) and related control evaluations

Technology Control Monitoring & Testing:

• Perform and support technology control monitoring and testing activities, including design and operating effectiveness assessments
• Plan and execute testing activities, including scoping, evidence review, evaluation, and documentation of conclusions
• Exercise sound judgment when assessing evidence quality and control effectiveness
• Track control deficiencies, action items, and remediation efforts through to closure

Execution, Tracking & Delivery Discipline:

• Own day-to-day execution of assigned risk and control activities, ensuring work is structured, sequenced, and completed on time
• Maintain visibility of milestones, dependencies, and execution status across multiple workstreams
• Prepare clear summaries and execution updates highlighting risk exposures, testing progress, and issues requiring attention
• Proactively identify execution risks, delays, or dependencies and escalate appropriately

Governance, Communication & Documentation:

• Support preparation for and follow-ups from technology risk governance forums, reviews, and working sessions
• Communicate risk and control outcomes clearly to Risk and Technology stakeholders
• Maintain accurate, complete, and audit-ready documentation for risks, controls, testing results, and remediation evidence
• Contribute to continuous improvement of technology risk execution practices and documentation standards

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.


Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

Bachelor’s degree in Engineering, Information Systems
2–5 years of experience in Technology Risk, IT Controls, Control Testing, or Risk Execution roles

Required Skills & Experience:
Experience in Technology Risk, IT Controls, Operational Risk, or Technology Control Monitoring & Testing
Strong understanding of technology risks and control concepts
Ability to execute work with structure, discipline, and follow-through
Comfortable managing multiple parallel deliverables and driving items to closure

Nice-to-Have:
Exposure to execution or delivery management practices, such as planning, tracking milestones, and managing dependencies
Experience preparing structured execution updates or management summaries

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.