Visa

3 months ago

Information Security GRC Engineering Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 21 hours agoStatus: Live

Job Summary

Help deliver continuous, scalable compliance by translating regulatory and control requirements (PCI DSS, SOC 2, Visa KCX) into practical implementations across products, teams, and cloud environments. Build and operate security control frameworks aligned to Visa Key Controls, design automation for validation and evidence collection, and support annual certification and customer audits/RFP responses. Partner with engineering and platform teams and Visa Cyber, Risk, and Legal to integrate centrally provided security/compliance capabilities.

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead implementation and ongoing operation of a security controls framework aligned to Visa Key Controls, PCI DSS, SOC 2, and other requirements.
•Translate regulatory and control requirements into practical, product-aware control implementations with engineering and platform teams.
•Design and maintain automation for compliance activities (validation, evidence collection/normalisation, workflow orchestration, and compliance telemetry).
•Coordinate annual certification and assurance activities (e.g., PCI DSS, SOC 2) with internal teams, auditors, and Visa central control functions.
•Provide assurance for customer RFP responses and customer audits, and represent Information Security in external assurance engagements.

Travel: Low travel

Key Requirements

•3+ years’ experience ensuring information security compliance in highly regulated environments.
•Experience implementing security control frameworks such as SOC 2, ISO27000, and PCI, including work as a SOC 2 Lead Auditor/Implementer.
•Strong knowledge of ISMS and security risk management practices.
•Experience performing internal or third-party security compliance assessments, including evidence review and control testing.
•Bachelors degree preferred in information assurance, computer science, engineering, or related field.

Experience:3+ yearsHighly regulated environmentsSecurity complianceFinancial services

Education:Bachelor's in information assurance, computer science, engineering, or related field

Skills:CommunicationPresentationStakeholder managementAnalytical thinkingMulti-tasking under pressure

Certifications:ISO270001 LI/LAPCIPISACISACISMCISSP

Languages:English

Tech Stack:GRC engineeringPCI DSSSOC 2Visa KCXVisa Key ControlsISMSISO27000CI/CDCloud computingNetwork securityEndpoint securityIdentity and access managementOWASP Top 10CVEsSeparation of duties

Company Brief

Visa

Global payments technology company that operates the VisaNet electronic payments network, facilitating credit, debit and digital transactions between consumers, merchants, financial institutions and governments worldwide.

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1958

Glassdoor: 3.8

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Visa

3 months ago

Information Security GRC Engineering Consultant

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 21 hours agoStatus: Live

Job Summary

Location: London

Workplace: Hybrid

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Lead implementation and ongoing operation of a security controls framework aligned to Visa Key Controls, PCI DSS, SOC 2, and other requirements.
•Translate regulatory and control requirements into practical, product-aware control implementations with engineering and platform teams.
•Design and maintain automation for compliance activities (validation, evidence collection/normalisation, workflow orchestration, and compliance telemetry).
•Coordinate annual certification and assurance activities (e.g., PCI DSS, SOC 2) with internal teams, auditors, and Visa central control functions.
•Provide assurance for customer RFP responses and customer audits, and represent Information Security in external assurance engagements.

Travel: Low travel

Key Requirements

•3+ years’ experience ensuring information security compliance in highly regulated environments.
•Experience implementing security control frameworks such as SOC 2, ISO27000, and PCI, including work as a SOC 2 Lead Auditor/Implementer.
•Strong knowledge of ISMS and security risk management practices.
•Experience performing internal or third-party security compliance assessments, including evidence review and control testing.
•Bachelors degree preferred in information assurance, computer science, engineering, or related field.

Experience:3+ yearsHighly regulated environmentsSecurity complianceFinancial services

Education:Bachelor's in information assurance, computer science, engineering, or related field

Skills:CommunicationPresentationStakeholder managementAnalytical thinkingMulti-tasking under pressure

Certifications:ISO270001 LI/LAPCIPISACISACISMCISSP

Languages:English

Tech Stack:GRC engineeringPCI DSSSOC 2Visa KCXVisa Key ControlsISMSISO27000CI/CDCloud computingNetwork securityEndpoint securityIdentity and access managementOWASP Top 10CVEsSeparation of duties

Company Brief

Visa

Industry: Payments

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Francisco, United States

Founded: 1958

Glassdoor: 3.8

Website LinkedIn Glassdoor