Security Analyst/coordinator

Company Description

Visa is a world leader in digital payments, facilitating more than 215 billion payments transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories each year. Our mission is to connect the world through the most innovative, convenient, reliable and secure payments network, enabling individuals, businesses and economies to thrive.

When you join Visa, you join a culture of purpose and belonging - where your growth is priority, your identity is embraced, and the work you do matters. We believe that economies that include everyone everywhere, uplift everyone everywhere. Your work will have a direct impact on billions of people around the world - helping unlock financial access to enable the future of money movement.

**Join Visa: A Network Working for Everyone.**

**Job Description**:
**Purpose of Role**

The Security Analyst and Coordinator role is key to managing projects for the Application Security team as part of Visa Spend Clarity for Enterprise (VSCE).

You will work closely with the Application Security Lead to direct the Team.

**Areas of Accountability**

**Project Governance**
- Building and maintaining Application Security project governance models and stakeholder communication matrices
- Facilitate the development of project plans and where applicable, project charters
- Requirements gathering - collecting stakeholder requirements throughout the duration of projects and facilitating the prioritisation of such requirements
- Planning and managing resources across multiple projects running in parallel
- Ability to assess risk and present risk management as a security function to stakeholders as ROI is essential.
- Presenting visibility to wider Business the value Application Security provide.

**Project Management**
- Managing initiatives on time and within time tolerances ensuring key stakeholder reporting is maintained throughout
- Effectively managing risks and issues alongside the Application Security Lead. Resolving issues quickly and mitigating risks as they arise
- Monitoring progress across all projects, collecting data and communicating this data in an effective way ensuring all stakeholders are adequately informed.
- Successful delivery of initiatives
- Showing understanding of risk analysis, risk management and return on investment as related to risk.
- Presenting business cases, framed by risk (as we process it in security) in a way that effectively can communicate to upper management. Thus, enabling correct decisions to be made regarding security concerns.

**Team Workflow Management**

Manage and optimise flow of work through:

- visualising work, workflow and risks
- limiting work in progress and encouraging a predictable and sustainable pace
- facilitating events and review meetings
- encourage team collaboration and feedback loops and data driven decision making
- Co-ordination with the Application Security Lead to ensure team workload allows for education and learning bandwidth

Keeps the Application Security Team on track with road map deliverables

Regular progress updates to the Application Security Lead for wider communication.
Provide regular communications and effectively manage stakeholder expectations

**Coordination of Secure Software Development Lifecycle Activities**
- Every release, all new development must be penetration tested prior to delivery into production.
- Coordination of all delivery teams to provide the necessary data for penetration testing.
- Coordination of all delivery teams to ensure Security Assessments are performed according to SSDLC guidelines.
- Penetration testing of all new development is completed in time for each release.
- Communicate results for analysis with the Application Security Lead.
- Communicate SSDLC milestones and failures to Application Security Lead.

This is a hybrid or remote position. Hybrid employees can alternate time between both remote and office. Employees in hybrid roles are expected to work from the office two days a week, Tuesdays and Wednesdays with a general guidepost of being in the office 50% of the time based on business needs.

A remote position does not require job duties be performed within proximity of a Visa office location. Remote positions may be required to be present at a Visa office with scheduled notice.

**Qualifications**:
Key Competencies:
Technical/Professional Knowledge and Skills:

- Good technical understanding, must be able to interface with, business, software engineering and operationally focused individuals at all levels including the executive suite

Decision Making:

- Identifying and understanding issues, problems, and opportunities, comparing data from different sources to draw conclusions, using effective approaches for choosing a course of action or developing appropriate solutions, taking action that is consistent with available facts, constraints, and probable consequences.
- Identifies iss