Security Operations Analyst

We are looking for a Security Assurance Analyst to join our growing Security Team at VISA.

The mission of the I&T Digital Security organisation is to deliver an efficient and effective service that has scalability and flexibility to support the demands of a global leader in digital payments.

Supporting the Head of Information Security Architecture and Assurance, as well as working closely with key stakeholders, including the Head of Governance, Risk and Compliance, Digital Security, IT, and business teams, you will focus on core areas such as risk management and security due-diligence reviews, ensuring compliance with legal, regulatory, and relevant security policies and best practices.

In this position, you will provide assurance and guidance that the security features, practices, procedures, and architecture of an information system accurately mediate and enforce the security policies.

Visibility and the ability to build close working relationships with Information & Technology (I&T) team members, business stakeholders, as well as external partners, is essential. This will require some ‘on-site’ visits, on a planned basis.

The role demands business insight, technical acuity, and the ability to think, communicate, and write at various levels of abstraction.

About you

You will have experience in:

• Interpreting information assurance and security policies and applying these to manage risks.

• Providing advice and guidance to ensure adoption of and adherence to information assurance architectures, strategies, policies, standards, and guidelines.

• Planning, organizing, and conducting information assurance and accreditation of complex domains, cross-functional areas, and across the supply chain.

• Validating operating systems, networks, software, and hardware are protected and compliant with VISA's policies.

• Identifying security risks and producing effective reports to articulate and report those risks along with proposed remediations in appropriate risk forums.

• Engaging with information security operations to maintain acceptable levels of control and risk throughout the business.

• Contributing to the development and implementation of a robust set of policies, standards, and guidelines.

• Maintaining relevant documentation related to information security.

• Supporting monitoring of the external environment and assessment of emerging technologies.

• Identifying risks and vulnerabilities, assessing their impact and probability, developing mitigation strategies, and reporting to the business.

• Conducting formal assessments or reviews for given domain areas, suppliers, or parts of the supply chain. Collating and examining records, analyzing the evidence, and drafting all or part of formal compliance reports.

• Determining the risks associated with findings and non-compliance and proposing corrective actions.

Benefits

• Competitive salary

• Company bonus

• Pension scheme

• Life assurance

• Income protection

• 25 days holiday plus bank holidays

• Electric car scheme

• Annual Cycle to Work Scheme