Sr. Risk Management Manager, Global ERM

Visa; Atlanta (GA); Hybrid; USD 127,000 - 204,000; Full time

Job summary

Visa seeks a driven Risk Business Partner within the Global Enterprise Risk Management (ERM) team to own the risk partnership with the Data Privacy Office and extend to other Visa organizations. The role requires deep knowledge of data privacy and hands-on ERM experience to shape Policies, Procedures, Frameworks, and Standards.

The role is based in Atlanta, GA in a hybrid arrangement with mandatory in-office days.

Qualifications

• 8+ years of relevant work experience with a Bachelor Degree or at least 5 years with an Advanced Degree or 2 years with a PhD

Responsibilities

• Own the risk business partnership with the Data Privacy Office (DPO) and extend to other Visa organizations.
• Lead execution of the ERM program to the highest standard across the DPO, including RCSA and control testing.
• Partner with process owners across DPO, Global Data Office, and other orgs to identify risks and challenge controls.

Skills

Risk management

Data privacy

Stakeholder management

Regulatory knowledge

Analytics

Communication

Education

Bachelor's degree

Advanced degree

Tools

IBM OpenPages

Job description

About Us

Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale - tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters - to you, to your community, and to the world. Progress starts with you.

Job Description

What's it all about?

We are seeking a driven, engaging risk leader to serve as a Risk Business Partner within the Global Enterprise Risk Management (ERM) team, unlocking the value of strong risk management for the business and functional partners it serves. The role holder will own the risk partnership with the Data Privacy Office, extending to other organizations across Visa as the role's scope evolves, driving insight, challenge, and control testing that deepen the organization's risk profile.

This is a leadership role for someone with deep knowledge and hands‑on experience of data privacy requirements and operations, who also operates broadly across the ERM function to shape and deliver Policies, Procedures, Frameworks, and Standards. The role will be based in Atlanta, GA.

What we expect of you, day to day:

• Own the risk business partnership with the Data Privacy Office (DPO), extending to other Visa organizations, driving alignment, insight, and business outcomes.
• Lead execution of the ERM program to the highest standard across the DPO (acting as Second Line of Defense), including the full Risk and Control Self‑Assessment (RCSA) process and control testing for the DPO and any other function requiring RCSA execution.
• Partner with process owners across the DPO, the Global Data Office, and other organizations to identify risks and rigorously challenge the design and operating effectiveness of controls.
• Serve as the first point of contact and trusted risk advisor to the DPO, providing consistent, high‑quality advice, guidance, and challenge on risk matters, and act as the conduit back into the ERM team.
• Champion risk culture, building risk partnerships that educate and embed risk management thinking across the organization.
• Unlock deep, forward‑looking insight into the Data Privacy risk profile and, as the role's remit extends, other organizations, elevating that insight across the enterprise through proactive reporting to senior stakeholders.
• Develop, draft, and deliver risk reporting across the ERM team, informing Visa's broader risk profile.
• Lead deep dives, in partnership with the Director, to strengthen the control environment.
• Execute and lead complex risk assessments across ERM, the DPO, and the broader business to generate deep insight into the company's risk landscape.
• Develop and deliver aggregate risk reporting for all levels of the company.
• Monitor data quality within the risk system of record, challenging the first and second lines of defense to ensure the accuracy of risk records.
• Drive updates to ERM frameworks, both in written form and system execution - defining requirements, partnering with technology, and delivering testing.
• Design and deliver reporting across ERM's scope of influence, equipping regional risk owners and risk teams with a clear understanding of the risks, controls, issues, and events relevant to them.
• Proactively identify and solve problems across ERM, the DPO, and any other business or function as required.

This position is a Hybrid role to be based in our Atlanta, GA office location. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

What we are after:

An experienced risk professional, preferably with a major financial institution or payment card company, with extensive experience of evaluating and managing enterprise and operational risk in a regulated environment, preferably financial services.

Basic Qualifications:

• 8 or more years of relevant work experience with a Bachelor Degree or at least 5 years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 2 years of work experience with a PhD

Preferred Qualifications:

• 9 or more years of relevant work experience with a Bachelor Degree or 7 or more relevant years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 3 or more years of experience with a PhD
• An experienced risk professional, preferably with a major financial institution or payment card company, with extensive experience of evaluating and managing enterprise and operational risk in a regulated environment, preferably financial services.
• 9+ years of relevant work experience with a Bachelor's degree, or 7+ years with an Advanced Degree (e.g. Masters, MBA, JD, MD), or 3+ years with a PhD.
• Deep knowledge and hands‑on experience of data privacy requirements and operations, with experience across multiple privacy jurisdictions (e.g., GDPR, UK GDPR, PIPEDA, PIPL, Australian Privacy Act) strongly preferred.
• Professional privacy certification is a significant benefit (e.g. IAPP CIPM, CIPP/E, CIPP/US, or ISACA CDPSE).
• Understanding of the payments industry and/or financial services, payment products and services, and the wider economic/competitive landscape.
• Knowledge of legal and regulatory requirements for regulated entities and the payment card industry, including data privacy, preferably across multiple jurisdictions.
• Strong knowledge and application of Artificial Intelligence (AI), including building AI capabilities relevant to risk management.
• Significant experience evaluating the policies, processes, and controls associated with complex business and operational processes.
• Experience applying risk management practices as they relate to Enterprise and Operational Risk Management - risk appetite, risk assessment, scoring, mitigation, acceptance, and control testing.
• Proven ability to work with, and influence, all organizational levels - from process owners to senior executives.
• Proven analytical, process, and problem‑solving skills, with the ability to drive end‑to‑end process improvement in partnership with business owners.
• Ability to analyze existing data to refine business processes and recommend automation and improvements.
• Ability to deliver results in a large, global, matrix organization.
• Strong communication skills and a demonstrated ability to partner with, and influence, key stakeholders.
• Proficiency in MS Word, Excel, Access, and PowerPoint.
• Experience with IBM OpenPages.

Information for US Applicants

For roles located in the US, the estimated salary range for this position is $127,300.00 to $ 204,100.00 USD per year, which may include potential sales incentive payments (if applicable). Salary may vary depending on job‑related factors which may include knowledge, skills, experience, and location. In addition, this position may be eligible for bonus and equity.Visa has a comprehensive benefits package for which this position may be eligible that includes Medical, Dental, Vision, 401(k), FSA/HSA, Life Insurance, Paid Time Off, and Wellness Program.

Work Hours

Varies upon the needs of the department.

Travel Requirements

This position requires travel 5-10% of the time.

Mental/Physical Requirements

This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color religion, sex, national origin, sexual orientation, gender identity, disability or protect veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with the EEOC guidelines and applicable local law.