Sr. Risk Management Manager, Global ERM

Visa•Atlanta, GA

8d•$127,300 - $204,100•Hybrid

About The Position

Visa is seeking an experienced risk leader to serve as a Risk Business Partner within its Global Enterprise Risk Management (ERM) team. The role owns the risk partnership with the Data Privacy Office (DPO), with scope that may extend to other Visa organizations, and provides insight, challenge, control testing, and risk advice. It also contributes broadly across ERM to the development and delivery of policies, procedures, frameworks, and standards. The position is based in Visa’s Atlanta, Georgia office and is hybrid, with at least three days in the office each week. The role leads ERM program execution for the DPO as a Second Line of Defense, including Risk and Control Self-Assessments (RCSAs), control testing, complex risk assessments, and risk reporting. It works with process owners and stakeholders to evaluate risks and controls, strengthen the control environment, improve risk data quality, and foster risk management culture. The position also helps maintain ERM frameworks and systems, partners with technology on requirements and testing, and provides risk insights to senior stakeholders and regional risk teams. The successful candidate will have substantial enterprise and operational risk experience in a regulated environment, along with hands-on knowledge of data privacy requirements and operations. Experience in financial services or the payments industry is preferred. The role requires analytical, communication, problem-solving, process improvement, and stakeholder-influencing skills in a large, global, matrixed organization.

Requirements

At least 8 years of relevant work experience with a Bachelor’s degree; at least 5 years with an advanced degree; or 2 years with a Ph.D. (basic qualifications).
Extensive experience evaluating and managing enterprise and operational risk in a regulated environment; financial services experience is preferred.
Deep knowledge and hands-on experience with data privacy requirements and operations.
Knowledge of legal and regulatory requirements for regulated entities and the payment card industry, including data privacy.
Strong knowledge and application of artificial intelligence, including building AI capabilities relevant to risk management.
Significant experience evaluating policies, processes, and controls for complex business and operational processes.
Experience applying enterprise and operational risk management practices, including risk appetite, assessment, scoring, mitigation, acceptance, and control testing.
Ability to work with and influence stakeholders at all organizational levels, from process owners to senior executives.
Strong analytical, process, and problem-solving skills, including end-to-end process improvement with business owners.
Ability to analyze existing data to refine business processes and recommend automation and improvements.
Ability to deliver results in a large, global, matrix organization.
Strong communication and stakeholder partnership skills.
Proficiency in Microsoft Word, Excel, Access, and PowerPoint.
Experience with IBM OpenPages.
Ability to travel 5–10% of the time.

Nice To Haves

9 or more years of relevant work experience with a Bachelor’s degree, 7 or more years with an advanced degree, or 3 or more years with a Ph.D.
Experience at a major financial institution or payment card company.
Experience with privacy requirements across multiple jurisdictions, such as GDPR, UK GDPR, PIPEDA, PIPL, and the Australian Privacy Act.
Professional privacy certification, such as IAPP CIPM, CIPP/E, CIPP/US, or ISACA CDPSE.
Understanding of the payments industry and/or financial services, payment products and services, and the wider economic and competitive landscape.

Responsibilities

Own the risk business partnership with the Data Privacy Office and potentially other Visa organizations, driving alignment, insight, and business outcomes.
Lead ERM program execution for the DPO as Second Line of Defense, including the full RCSA process and control testing.
Partner with process owners across the DPO, Global Data Office, and other organizations to identify risks and challenge control design and operating effectiveness.
Serve as the DPO’s first point of contact and trusted risk advisor, providing guidance and challenge and connecting the DPO with the ERM team.
Champion risk culture and help embed risk management across the organization.
Develop forward-looking insight into the Data Privacy risk profile and elevate it through proactive reporting to senior stakeholders.
Draft and deliver risk reporting across ERM to inform Visa’s broader risk profile.
Lead deep dives in partnership with the Director to strengthen the control environment.
Execute and lead complex risk assessments across ERM, the DPO, and the broader business.
Develop and deliver aggregate risk reporting for all levels of the company.
Monitor risk-system data quality and challenge the first and second lines of defense to ensure risk records are accurate.
Drive updates to ERM frameworks, including written documentation and system execution; define requirements, partner with technology, and deliver testing.
Design and deliver reporting that helps regional risk owners and teams understand relevant risks, controls, issues, and events.
Proactively identify and solve problems across ERM, the DPO, and other businesses or functions as required.