Vice President, Technology Risk

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose - to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Technology & Cyber Risk (TCR) is a Global Risk group that is tasked with deploying various programs that support Visa's objective of strong risk management and regulatory compliance. The Technology and Cyber Risk programs drive processes that enable Visa to identify, assess and manage availability & reliability as well as data security risks. Through the deployment of these programs, the TCR team also provides 2nd line challenge and oversight of these risks.

The programs consist of various components that build on a core foundation of Risk Control Self-Assessments (RCSAs), that are deployed across Technology. This team also operates the Governance processes providing oversight, risk assessment and adjudication of Visa's Key Controls. This includes the management of various working groups that involve stakeholders across Technology, Cyber, Risk and other functions. In addition, TCR is responsible for 2nd line monitoring & testing of Technology and Cyber controls, while continuing to drive automation and leverage AI/Technology in control monitoring. . TCR performs risk assessments of various domains across Technology, on a risk-based basis, and will as appropriate lead or participate in lessons learned reviews following technology incidents. Lastly, the VP TCR will work closely with Model Risk Management as it relates to the 2nd line oversight and monitoring of risks related to deployment of AI systems.

The person in this role will lead the TCR risk program for Visa, including the overall design and deployment. The VP leads the engagement with Technology teams and leadership, represents the program to external stakeholders (such as regulators) and defines the Program parameters, focused on driving for effective outcomes. The person in this role will ensure program policies, procedures, and controls are executed consistently across all Visa regions.

Essential Functions

• Lead the Technology & Cyber Risk Program and Team, including designated staff at the Risk Center of Excellence
• Develop, maintain, and enhance the deployment of the RCSA program across the Visa Technology and Cyber organization, and ensure availability & reliability as well as data security risks are identified in a timely and adequate manner
• Maintain the Visa Technology Risk Framework, and any related Visa Policies and Procedures and develop well designed training and communication materials
• Partner with the Technology on the risk assessment of Technology and Cyber domains, on a risk-prioritized basis.
• Prioritize controls to be subject to 2nd line control monitoring & testing, and continue to develop and enhance automation of control monitoring
• Identify, develop and lead the deployment of AI tools that can assist, augment or automate 2nd line risk control programs
• Work closely with Technology leaders on periodic assessment technology incidents and ensure proper remediation and issue management
• Represent the Technology & Cyber risk program to the FFIEC and other regulators across different markets as required
• Engage on regular basis with regional Risk teams and own the execution of the activities performed in support of regional risk oversight
• Implement governance and oversight of program management, including design and maintenance
• Build-out required program MIS, KRIs and overall reporting packs. Provide input into the further design and enhancements of our enterprise risk platforms
• Stay engaged with market practices, and identify best practices in the further evolution of Operational and Compliance risk
• Oversee budget of TCR

This is a hybrid position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office two days a week, Tuesdays and Wednesdays with a general guidepost of being in the office 50% of the time based on business needs.

Basic Qualifications:

* 12 or more years of work experience with a Bachelor's Degree or at least 10 years of experience with an Advanced degree (e.g. Masters/ MBA/JD/MD) or at least 8 years of work experience with a PhD

Preferred qualifications:

* 15 or more years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD, PhD)

* Deep domain expertise across various domains in Technology (O&I, Development, etc.) and/or Cyber Risk

* Organizational Change Management Experience: The candidate should be comfortable driving people change and have a track record of successfully navigating organizational changes.

* Demonstrated expertise in deploying effective, large-scale risk programs, working effectively with a broad group of 1st line stakeholders

* Strong understanding of applicable regulatory expectations on the design and deployment of 2nd line risk programs in Technology Risk

* System thinker with proven ability to connect the dots and design solutions that require deployment and/or buy-in across a larger group of stakeholders

* Domain expertise in one or more of the following domains: Data Security / Cyber risk management, Technology Operations, AI and digital trust

* Effective leader with track record of growing global risk talent and developing operational risk management skills across 1st line functions

* Self-starter who can communicate with a deep understanding of the company needs and enable people to move forward through complexity

* Strong experience driving risk programs, projects and collaborating in large, matrixed organizations

* Experience establishing and leading global teams

* Experience with Executive Reporting, with the ability to deliver data insights

* A clear record of strategic thinking, sound judgment and superior problem solving

* Flexible and creative thinker with strong execution skills, generate out-of-the-box solutions, manage ambiguity, anticipate the impact of decisions/initiatives and able to move seamlessly from high level concepts to details

* Proven project management skills and experience

Work Hours: Varies upon the needs of the department.

Travel Requirements: This position requires travel5-10% of the time.

Mental/Physical Requirements: This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Visa will consider for employment qualified applicants with criminal histories in a manner consistent with applicable local law, including the requirements of Article 49 of the San Francisco Police Code.

U.S. APPLICANTS ONLY: The estimated salary range for a new hire into this position is 247,200.00 to 340,000.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job-related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity. Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401 (k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.