Compliance & Risk Consultant

Visa•Foster City, CA

3d•$129,200 - $206,700•Hybrid

About The Position

We are seeking a Compliance & Risk Consultant to support operations of the Visa Account Information Security (AIS) compliance program, with a focus on VisaNet Processors, Card Vendors, and related service providers in North America. This role requires someone who can independently manage a portfolio of direct-program compliance cases, identify when issues require escalation, prepare clear risk-based summaries for leadership, and drive cross-functional stakeholders toward timely resolution. The consultant will develop into a subject matter expert (SME), ensuring consistent application of Visa Rules and security standards while exercising sound judgment in client, stakeholder, and enforcement discussions. Because VisaNet Processors and Card Vendors operate under direct relationships with Visa, this role requires a high standard of diligence. The consultant will help manage direct-program risk by ensuring these entities continue to meet Visa’s security, operational, contractual, and program expectations throughout the relationship lifecycle, from onboarding and annual validation through issue remediation, escalation, and potential enforcement action.

Requirements

5 or more years of relevant work experience with a Bachelors Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD
Ability to work a schedule aligned to U.S. business hours to ensure real-time collaboration with clients and global teams
8+ years of experience in compliance program administration, case management, or risk oversight in financial services, payments, or related industries.
Strong organizational and case management skills, with the ability to manage multiple deadlines and drive issues to closure.
Strong written and verbal communication skills, including the ability to prepare clear case summaries for internal and external audiences.
Ability to assess third-party or direct-program risk by weighing compliance evidence, contractual obligations, operational impact, and unresolved issues.
Experience with compliance tracking systems, reporting tools, and data reconciliation.
Experience in issuing/acquiring industry, third-party oversight, or similar regulatory/compliance functions.
Experience working with technology teams to define requirements and deliver enhancements.
Prior experience in an enforcement or compliance focused role, either in the financial industry or PCI area of focus

Nice To Haves

6 or more years of work experience with a Bachelors Degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or up to 3 years of relevant experience with a PhD
Bachelor’s degree or equivalent professional experience.
Familiarity with PCI DSS/CPP principles or payment industry compliance programs (not required to be a technical auditor).

Responsibilities

Execute compliance activities across multiple programs, including onboarding, annual validation, ongoing monitoring, and lifecycle changes for VisaNet Processors and Card Vendors.
Assess onboarding, renewal, continuation, restriction, or termination risks by considering compliance status, contractual obligations, operational dependencies, security posture, and unresolved remediation issues.
Review compliance documentation, including Reports on Compliance (ROC) and Attestations of Compliance (AOC), to confirm adherence to applicable standards and identify gaps or risks.
Maintain ownership of assigned entities, proactively identifying overdue items, deficiencies, aging cases, and emerging risks, and driving remediation through closure.
Support enforcement and direct-program decisions by documenting non-compliance issues and preparing decision-ready case summaries for leadership review and escalation.
Maintain accurate compliance records and reporting that provide visibility into portfolio health, aging items, risk exposure, and enforcement readiness.
Apply Visa Rules, PCI security standards, contractual expectations, and program-specific requirements consistently across assigned entities.
Evaluate exception and waiver requests by assessing risk, supporting justification, and compensating controls within established governance frameworks.
Provide clear guidance to stakeholders by translating requirements into actionable expectations and remediation steps.
Own escalation management for assigned matters, including issue triage, stakeholder follow-up, status tracking, and timely resolution of cases requiring governance review or direct-program risk decisions.
Serve as a primary point of contact for internal teams, clients, VisaNet Processors, and Card Vendors on compliance matters.
Develop communications that clearly outline requirements, required actions, timelines, and consequences of non-compliance.
Exercise judgment in client and stakeholder discussions by knowing when to clarify requirements, when to push for action, and when to escalate sensitive or unresolved matters.
Coordinate with Sales, Client Services, Product/Technology, Regional Risk, and Compliance teams to resolve issues and align on next steps.
Identify opportunities to improve program effectiveness by reducing manual follow-up, strengthening tracking discipline, improving case visibility, and addressing operational inefficiencies.