Information Security Compliance Consultant at Visa

Visa

Cambridge, UNITED KINGDOM, gb·3d ago

SeniorFull-time

Salary Range

$95,306 - $128,944 /year

Estimated

This salary is estimated based on similar roles. The actual salary may vary.

About the Role

We are looking for an Information Security Compliance Consultant to join Featurespace. This role involves building and overseeing security controls frameworks, ensuring compliance with industry standards, and managing certification processes like PCI DSS, SOC2, and DORA.

Key Responsibilities

→Build and oversee Information Security controls framework and environment in line with industry standards
→Create, implement, and maintain security policies, standards, and procedures
→Ensure successful execution of compliance recertification efforts for certifications like PCI DSS, SOC2, and DORA
→Provide assurance to customers by coordinating responses to RFP questions and audits
→Coordinate with Visa Legal, Governance, Risk & Compliance teams for security risk assessment and supplier security assessments
→Drive security awareness and promote security within Featurespace and with industry partners
→Act as a subject matter expert on compliance requirements and consult across the enterprise
→Create, review, update, and complete information security policy, standards, and guidelines
→Conduct security risk assessments, business impact analyses, and recommend control improvements
→Maintain and govern risk records within Visa risk management tooling
→Coordinate and lead responses to customer RFP questions and security audits
→Stay updated with security and technology trends, evaluate emerging threats, and recommend mitigations
→Coordinate Security Awareness and Training
→Consult with internal teams, clients, auditors, and regulators regarding information security compliance
→Liaise with internal teams and stakeholders for security compliance coordination
→Contribute advice and guidance for departmental security strategies
→Develop and maintain documentation, controls, processes, workflows, metrics, reporting, solutions, and applications/tools
→Engage during actual and simulated incidents and recovery operations
→Ensure processes and controls are operating effectively and correctly evidenced
→Travel periodically as required for customer, company, or relevant events

Requirements

✓Strong understanding of Information Security controls and compliance frameworks
✓Experience with PCI DSS, SOC2, and DORA certifications
✓Knowledge of Visa Key Controls and Policies
✓Ability to conduct risk assessments and recommend control improvements
✓Experience with policy development and document management
✓Strong communication and coordination skills
✓Ability to liaise with internal and external stakeholders
✓Willingness to adapt to a variable role and take ownership of duties as required