Associate Cybersecurity Analyst – Third Party Technology Risk Management (3PTRM)

Visa; Greater London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading global payments technology company is seeking a Cybersecurity Analyst to ensure the security of third-party engagements. This hybrid role requires conducting security reviews, threat modeling, and ensuring compliance with standards like PCI DSS and NIST. The ideal candidate has a Bachelor's degree in Computer Science and 1-3 years of relevant experience in cybersecurity. Join us to make a significant impact in a mission-driven environment while promoting security across vital transactions.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline.
• 1-3 years of experience in cybersecurity, IT audit, or IT risk management.
• Experience conducting security reviews, threat modeling, and risk assessments.

Responsibilities

• Conduct security reviews and assessments for suppliers and third-party partners.
• Perform threat modeling and cybersecurity control walkthroughs.
• Support security audits and compliance evaluations.

Skills

Cybersecurity knowledge

Risk assessment

Threat modeling

Compliance standards (PCI DSS, NIST)

Programming proficiency

Education

Bachelor’s degree in Computer Science or related field

Job description

Company Description

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable, and secure payments network, enabling individuals, businesses, and economies to thrive while driven by a common purpose – to uplift everyone, everywhere by being the best way to pay and be paid.

Make an impact with a purpose-driven industry leader. Join us today and experience Life at Visa.

Job Description

Visa invites qualified applicants to apply for the position of Cybersecurity Analyst within the Third Party Technology Risk Management (3PTRM) team. This role is integral to ensuring the security and integrity of Visa’s third-party engagements and the protection of sensitive information across the supply chain. The successful candidate will collaborate with Supplier Relationship Owners and cybersecurity professionals in a hybrid capacity based in London, UK.

Essential Functions:

• Conduct comprehensive security reviews and assessments for suppliers and third-party partners, with particular emphasis on systems processing sensitive data.
• Perform threat modeling and detailed walkthroughs of cybersecurity controls to substantiate risk mitigation measures.
• Participate in and support security audits and onsite assessments, with a focus on evaluating suppliers’ security posture against Visa’s proprietary security framework.
• Assist in the ongoing monitoring of third-party compliance with regulatory requirements and industry standards, including PCI DSS and NIST.
• Participate in third-party security incident management processes, ensuring rapid identification, escalation, and resolution of security incidents.
• Facilitate enhancements to process remediation and the implementation of robust risk management strategies.

This is a hybrid position. Expectation of days in the office will be confirmed by your Hiring Manager.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related discipline, or equivalent professional experience.
• One to three years of direct experience in cybersecurity, IT audit, or IT risk management, including a demonstrable understanding of third-party risk and supply chain security.
• Proven experience conducting security reviews, threat modeling, and risk assessments of systems containing sensitive data.
• Demonstrated experience performing security audits or assessments, with an emphasis on identifying threats and cybersecurity risks.
• Familiarity with third-party security incident management practices.
• Comprehensive knowledge of cybersecurity frameworks and standards, including NIST, ISO, and PCI DSS.
• Technical proficiency in at least one programming language, and the ability to successfully complete a coding assessment as part of the selection process.

Preferred Qualifications

• Prior experience conducting onsite third-party risk assessments.
• Advanced analytical, communication, and organizational skills.

Additional Information

Visa is an EEO Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.