Senior Info. Security Analyst - Information Security Assessment

Sr. Info. Security Analyst - Information Security Assessment

Location: United States-CO-Highlands Ranch
Organization: Technology
Job: Information Security
Job Number :132612

Description

Visa Inc. is a global payments technology company that connects consumers, businesses, financial institutions and governments in more than 200 countries and territories, enabling them to use digital currency instead of cash and checks.

Visa does not issue cards, extend credit or set rates and fees for consumers. Visa's innovations enable its bank customers to offer consumers choices: Pay now with debit, ahead of time with prepaid or later with credit products. From the world's major cities to remote areas without banks, people are increasingly relying on digital currency along with mobile technology to use their money anytime, make purchases online, transfer funds and access basic financial services. All of which makes their lives easier and helps grow economies.

Behind the Visa brand are more than 6,500 talented employees who continuously raise the bar with innovative solutions and products that deliver the convenience and security of digital currency to more people all over the world.

POSITION SUMMARY

The global information security assessment team partners with IT groups, business groups, and project teams to perform security risk and compliance assessments for applications, infrastructure, and vendor/third parties. The position will also support the review of technical security requirements, and will support the review, approval and tracking of security exceptions and remediation.

JOB SCOPE
This is an individual contributor role responsible for conducting security assessments, including identifying and resolving security issues of advanced complexity. This position requires an ability to analyze complex projects and identify relevant policies and gaps. This role works independently with project teams and requires advanced oral and written communication skills.

Responsibilities
-The candidate will be responsible for performing information security and risk assessments based on involvement and consulting with project teams.
-The candidate will evaluate project designs, applications, network infrastructure and systems, and determine security compliance and overall security risk, based on corporate policies, security requirements documents, industry common practice, and legislative and legal requirements.
-The candidate should have an in-depth understanding of security policies and best practice standards.
-The candidate will provide technical training and consulting on current security topics and issues.
-The candidate must be able to communicate the concepts of information security to guide information security practices and solutions within the IT environment.
-The individual will advocate enhancements to existing processes and procedures to improve information security controls.
-The candidate must have the superior ability to work well with others in a supportive team environment, the ability to prioritize multiple high priority activities, and must have outstanding written and verbal communication skills.

Qualifications

Qualifications
-Prefer CISA or CRISC and/or CISSP certifications and have 5-7 years industry experience in information security.
-The candidate must have an in-depth knowledge of network and systems. The candidate must be able to understand security requirements documents for such assets as routers, switches, firewalls, Windows and UNIX systems, database systems, and security architectures.
-Bachelors/Degree or equivalent experience; typically requires a minimum of 5-7 years information security experience.
-Interpersonal and facilitation skills along with effective communication (both written and verbal) skills.
-Sound planning, organizational and problem solving skills.
-Good project management skills.
-Demonstrated ability to meet deadlines and commitments in an environment that requires multitasking among concurrent projects.
-Ability to convey security concepts related to network, application, and systems - to both technical and non-technical audiences.