Associate Cybersecurity Analyst - Third Party Technology Risk Management (3PTRM)

Visa; City of Westminster; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading payment technology company in London is seeking a Cybersecurity Analyst to ensure the security and integrity of third-party engagements. The successful candidate will conduct security reviews, perform threat modeling, and assess compliance with industry standards such as PCI DSS. This hybrid role requires expertise in cybersecurity, risk management, and a Bachelor's degree in a relevant field. The position offers a dynamic environment with opportunities to collaborate with professionals dedicated to safeguarding sensitive information.

Qualifications

• 1-3 years of direct experience in cybersecurity or IT risk management.
• Experience conducting security reviews and risk assessments.
• Foundational knowledge of cybersecurity frameworks (NIST, ISO, PCI DSS).

Responsibilities

• Conduct security reviews and assessments for suppliers.
• Perform threat modeling and cybersecurity controls evaluation.
• Support ongoing third-party compliance monitoring.

Skills

Cybersecurity expertise

Risk management

Threat modeling

Security audits

Programming proficiency

Education

Bachelor's degree in Computer Science or related field

Job description

Visa invites qualified applicants to apply for the position of Cybersecurity Analyst within the Third Party Technology Risk Management (3PTRM) team. This role is integral to ensuring the security and integrity of Visa's third-party engagements and the protection of sensitive information across the supply chain. The successful candidate will collaborate with Supplier Relationship Owners and cybersecurity professionals in a hybrid capacity based in London, UK.

Responsibilities

• Conduct comprehensive security reviews and assessments for suppliers and third-party partners, with particular emphasis on systems processing sensitive data.
• Perform threat modeling and detailed walkthroughs of cybersecurity controls to substantiate risk mitigation measures.
• Participate in and support security audits and onsite assessments, with a focus on evaluating suppliers' security posture against Visa's proprietary security framework.
• Assist in the ongoing monitoring of third-party compliance with regulatory requirements and industry standards, including PCI DSS and NIST.
• Participate in third-party security incident management processes, ensuring rapid identification, escalation, and resolution of security incidents.
• Facilitate enhancements to process remediation and the implementation of robust risk management strategies.

This is a hybrid position. Expectation of days in the office will be confirmed by your Hiring Manager.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Engineering, or a related discipline, or equivalent professional experience.
• One to three years of direct experience in cybersecurity, IT audit, or IT risk management, including a demonstrable understanding of third-party risk and supply chain security.
• Proven experience conducting security reviews, threat modeling, and risk assessments of systems containing sensitive data.
• Demonstrated experience performing security audits or assessments, with an emphasis on identifying threats and cybersecurity risks.
• Familiarity with third-party security incident management practices.
• Comprehensive knowledge of cybersecurity frameworks and standards, including NIST, ISO, and PCI DSS.
• Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process.

Preferred Qualifications

• Prior experience conducting onsite third-party risk assessments.
• Advanced analytical, communication, and organizational skills.

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose - to uplift everyone, everywhere by being the best way to pay and be paid.