Full-Time Information Security Manager
Visa is hiring a remote Full-Time Information Security Manager. The career level for this job opening is Manager and is accepting London, United Kingdom based applicants remotely. Read complete job description before applying.
Visa
Job Title
Posted
Career Level
Career Level
Locations Accepted
Share
Job Details
Lead and maintain compliance with SOC2 and ISO 27001.
Perform threat modeling, and security architecture design reviews on the entity’s applications/infrastructure and provide guidance on effective countermeasures.
Respond to audit and client assurance questionnaires and perform security due diligence of suppliers.
Be a subject matter expert and provide security guidance and recommendations to engineering and operational teams.
Contribute to Visa’s security policies, standards, and guidelines related to Information security.
Improve existing frameworks, processes, methodologies related to due diligence and integration of entities.
Lead security initiatives, due diligence and integration activities with Visa.
Understand the broad regulatory landscape affecting Visa business areas; remain current with emerging regulatory sentiments as well as solution trends in the marketplace.
This is a remote position. A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice.
Basic Qualifications
- 5+ years of relevant work experience with a Bachelor’s Degree.
Preferred Qualifications
- 6 or more years of work experience with a Bachelor's degree in computer science, information technology, or related disciplines.
- Experience with SOC2 Type 2, ISO 27001, PCI , SWIFT CSP.
- Hands on experience performing Security Architecture reviews / Threat Modelling.
- Experience working in banking or highly regulated financial institutions.
- Strong knowledge of Secure Software Development Lifecycle methodologies.
- Experience working on large scale cloud-based services and understanding of security challenges in deploying Cloud Applications.
- Industry standard certifications like CISSP, SABSA, OSCP, CISMS
- Strong written and oral communication skills to document reports on assessments and communicate potential weaknesses to the IT team or management
- Experience supporting M&A activities is a plus.