Cybersecurity Analyst, GRC

Visa • Austin, TX

151d • $105,800 - $149,550 • Hybrid

About The Position

As a key member of the Cybersecurity Governance Risk and Compliance and M&A Integration (GRC) team, the Cybersecurity Analyst - GRC will lead and support initiatives in IT compliance and risk management. Reporting to the Director of Cybersecurity, this role requires a proactive, self-directed professional with expertise in PCI DSS and/or PCI 3DS and SOC 2, and the ability to apply AI tools to streamline and enhance efficiency and accuracy. The Cybersecurity Analyst - GRC will also contribute to the evolution of GRC processes and ensure alignment with industry best practices, Visa standards, and contractual obligations.

Requirements

• 2+ years of relevant work experience and a Bachelor's degree, OR 5+ years of relevant work experience.
• Demonstrated expertise with PCI DSS and/or PCI 3DS standards and SOC 2 controls.
• Strong working knowledge of audit and compliance processes, including controls testing and evidence lifecycle management.
• Proven ability to work independently with minimal supervision, while also collaborating effectively across teams.
• Strong communication, planning, and organizational skills.
• Experience with GRC platforms (e.g., AuditBoard, Archer).
• Must be highly flexible and able to manage multiple tasks and priorities.

Nice To Haves

• 3 or more years of work experience with a Bachelor's degree in computer science, Information Security, Management Information Systems, or another related field, or more than 2 years of work experience with an Advanced Degree (e.g. Masters, MBA, JD, MD).
• CRISC, CISM, CISA, PCIP, and/or CISSP certifications preferred.

Responsibilities

• Oversee and organize security and compliance assessments, such as PCI DSS, PCI 3DS, and SOC 2, including preparing assessments, collecting evidence, coordinating with stakeholders, and remediating gaps.
• Independently manage ongoing compliance activities such as penetration testing, ASV scanning, control evaluations, issue remediation, and re-testing cycles.
• Work closely with technical and product teams to conduct security assessments, ensuring that code and infrastructure modifications comply with established security and compliance standards.
• Leverage AI and automation tools to improve compliance monitoring, evidence management, and efficiency.
• Respond to client, partner, and third-party security assessments, ensuring timely communications and thorough responses.
• Continuously refine GRC processes to improve scalability, accuracy, and responsiveness.
• Stay up to date and informed on developing data security regulatory concerns and changing IT and cybersecurity trends.

Benefits

• Medical
• Dental
• Vision
• 401 (k)
• FSA/HSA
• Life Insurance
• Paid Time Off
• Wellness Program

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees