Information Security GRC Engineering Consultant

About Us

Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

In your role as Information Security GRC Engineering Consultant - Featurespace, you will help us achieve our goals and deliver success on behalf of our customers by:

• Building systems and frameworks, in line with industry standards, Visa Key Controls and customer expectations, that make compliance continuous, measurable, and low‑friction.
• Acting as a hands‑on, solutions‑driven GRC engineering consultant, translating regulatory and control requirements (PCI DSS, SOC 2, Visa KCX) into practical, implementable controls within our products, teams and cloud environments.
• Designing and implementing automation where it adds genuine value, including control validation, evidence collection, workflow orchestration, and compliance telemetry.
• Leading compliance outcomes through expertise and influence, working cross‑functionally with the product, engineering and platform teams in Featurespace, and the central Visa Cyber, Risk and Legal teams.
• Helping Featurespace integrate effectively into Visa’s security and compliance ecosystem.
• Providing assurance to our customers by providing appropriate responses to customer RFP questions and customer audits on topics such as cybersecurity, technology operations, and compliance with standards (e.g., PCI DSS, SOC 2).

Responsibilities

As a company we hire people with a willingness to adapt to a variable role, so along with the key responsibilities below, we ask for ownership of any other duties as required.

• Control Framework Ownership & Assurance: Lead the implementation and ongoing operation of Featurespace’s security controls framework, ensuring alignment with Visa Key Controls, PCI DSS, SOC 2, and other applicable regulatory or customer requirements.
• GRC Engineering, Integration & Automation: Translate regulatory, compliance, and control requirements into practical, product-aware implementations.
• Advisory, Enablement & Secure-by-Design: Act as a trusted advisor and subject matter expert to Featurespace engineering, product, commercial, and leadership teams.
• Risk Management, Audit & External Engagement: Conduct security risk assessments and business impact analyses, and recommend appropriate control improvements.

Qualifications

Basic Qualifications:

• 3 or more years’ experience with ensuring information security compliance, preferably in highly regulated environments.
• Strong experience working with, building, and implementing successfully, a range of security control frameworks such as SOC 2, ISO27000 and PCI.
• Bachelors degree preferred in information assurance, computer science, engineering, or related field.
• Demonstrated ability to multi-task, work calmly under pressure, think analytically, understand complex systems and communicate complexity effectively.
• Excellent written and verbal communication as well as good presentation skills.
• Proficient English language skills are required.

Preferred Qualifications:

• Preferably one or more of the following security qualifications - ISO270001 LI/LA, PCIP, ISA, CISA, CISM, CISSP or similar.
• History of applying a strong/deep understanding of information security controls, technologies, policies, processes, and best practices.

This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.