Cybersecurity Vulnerability Analyst
Summary
Analyzes and manages cybersecurity vulnerabilities for Visa's infrastructure and products, coordinating remediation and compliance activities while collaborating with technical and business teams.
About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.
At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.
Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.
Job Description
The Vulnerability Analyst will play a pivotal role in internal Application Security team, leading the coordination and management of vulnerability processes across our infrastructure and products. This position is responsible for driving continuous improvement in vulnerability management, supporting compliance activities, and fostering collaboration across technical and business stakeholders.
Core Responsibilities:
- Coordinate Vulnerability Management: Work with asset owners and stakeholders to ensure prompt remediation, offering guidance as needed.
- Review and Escalation: Organize and lead regular vulnerability review calls, ensuring that appropriate stakeholders and asset owners are aware of open findings.
- Infrastructure Drop-In Sessions: Facilitate infrastructure vulnerability drop-in sessions to address technical issues and promote best practices.
- Reporting: Prepare and present quarterly vulnerability reports, raising findings to appropriate stakeholders and leadership.
- Compliance Support: Support PCI evidencing and Approved Scanning Vendor (ASV) activities, ensuring compliance with regulatory requirements.
- Exception Management: Guide exception management processes, review submissions, and track unresolved vulnerabilities, facilitating approvals and risk acceptance.
- Training and Enablement: Deliver training sessions to technical and non-technical teams on vulnerability management processes and security best practices.
- Collaboration: Prepare for and participate in Business Continuity Working Group (BCWG) meetings, fostering cross-functional collaboration.
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.