Senior Information Security Analyst - Security Architect

  • Full-time
  • Job Family Group: Technology and Operations

Company Description

Visa operates the world's largest retail electronic payments network and is one of the most recognized global financial services brands. Visa facilitates global commerce through the transfer of value and information among financial institutions, merchants, consumers, businesses and government entities.

We offer a range of branded payment product platforms, which our financial institution clients use to develop and offer credit, charge, deferred debit, prepaid and cash access programs to cardholders. Visa's card platforms provide consumers, businesses, merchants and government entities with a secure, convenient and reliable way to pay and be paid in 170 countries and territories.

Job Description

The Security Architect will be part of the Enterprise Security Architecture Team focused on delivering innovative and secure architectures in the web application and mobile application space to the enterprise environment. Visa is looking for an innovative security champion who can solve complex security problems. The individual provides technical leadership when it comes to web and mobile security applications. This individual will be expected to work closely with other solutions and security architects, developers and operators to deliver a security solution using hands-on experience in rolling security solutions and services.

Specific Responsibilities will include

• Provide technical leadership across the company, presenting a solid knowledge and expertise in the security practices addressing the various platforms, systems, and applications employed within the Visa stack
• Understand current security posture of applications including web and mobile specific for Visa's enterprise
• Lead integration, automation, and functional enhancements around existing security tools and processes ensuring innovation and advancement strategies that keep pace in the areas of access control, security-in-depth, secure transaction processing, secure coding practices for web and mobile applications
• Identify and analyze system and application level vulnerabilities to provide recommended counter measures or mitigating controls that reduce risk to an acceptable and manageable level.
• Provide accurate and timely reporting of architectural solutions, risk findings and propose remediation and mitigation options.
• Have a solid understanding of current compliance, regulatory and legal requirements relevant to the transaction processing industry such as PCI, HIPPA, SOX, and GLB.
• Be able to seek concurrence and buy-in from associates and senior
• Be able to ensure that stakeholder communications are timely, clear and concise. This includes the necessary scope of inclusion/exclusion, rules of engagement, timeframes, regular periodic management checkpoints, success criteria and reporting.
• Manage risk through a shared vision with the business leaders. Consult with and provide advice to senior management and their organizations in the development, implementation, and administration of information security policies and procedures, and on the information security infrastructure and privacy (PCI) related issues.
• Research the viability of new security products solutions that might assist the ISO operational groups in optimizing security patching, vulnerability scanning, IDS monitoring, log review, access management.
• As a Subject Matter Expert, maintain a level of knowledge to qualify as an authority in the profession within and outside Visa.
• Independently formulate direction, design or oversight for the development of major company-wide programs or plans that have significant impact on the success of the organization.
• Be a good team player and able to make sound decisions, exercise insightful judgment and use seasoned judgment.

Qualifications

  • Degree Required & Years of Experience: B.S + 5/MS + 3 years or higher in Electrical Engineering or Computer Science or relevant field
  • Executive presence; highly effective communicator
  • Strong problem solving and analytical skills; able to quickly digest any issue/problem encountered and recommend an appropriate solution
  • Excellent verbal and written communication skills including the ability to author and present materials ranging from detailed technical specifications to high-level presentations.
  • Have experience of project planning/reporting and management concepts, methodologies, tools, standards and procedures.
  • Proven experience in architecting complex web applications with backend services expertise such as API Gateway, Identity and Access Management Services, Data Protection technologies, Security Information Event Management
  • Include strong knowledge of Secure Development Lifecycle methodologies, Agile based methodologies, middleware platforms, development platforms (Java and .NET etc.).
  • Have experience working on large scale cloud based services (including SaaS, PaaS, IaaS) and very understanding of security challenges involve in deploying Cloud Applications
  • Hands on SW development experience in C/Objective-C/C++/Swift/Java
  • Technical experience with security technologies including, but not limited to, intrusion detection/prevention, event correlation, firewall, antivirus, anti-spam, policy enforcement, patch/configuration management, usage monitoring, audit, secure application development, etc.
  • Good if have experience if these solutions and technologies: Safenet, Vormetric, SPLUNK, Voltage, Thales, zTPF, zOS Crypto services, Containers like Dockers, Fortify, SIEM tools, Hadoop, Active Directory, PKI
  • Experience of smartphone platforms (iOS, Android and/or BlackBerry) and mobilized services. Good understanding of embedded systems based is a plus
  • Knowledge in payment services and systems is a plus
  • Knowledge payment compliance and standards (PCI DSS, FFIEC, NIST Security Standards ) is a plus
  • Qualified New Grads encouraged to apply

Additional Information

All your information will be kept confidential according to EEO guidelines.

Privacy Policy