Senior Consultant - Technology Risk Management

About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you. Job Description The Global Technology Risk team provides independent second-line oversight of technology availability, reliability, operational resilience, and recovery capabilities across Visa's critical services and infrastructure. The team partners closely with Engineering, Site Reliability Engineering (SRE), Architecture, Incident Management, Business Continuity, and Technology Risk stakeholders globally to assess and strengthen the resiliency of Visa's technology ecosystem. This role combines deep technical expertise with technology risk management to evaluate whether critical systems are designed, operated, monitored, and recovered within established service objectives and risk tolerances. The successful candidate will be capable of translating complex technical risks into meaningful business impacts while providing independent challenge and oversight of engineering controls and resilience practices. The ideal candidate possesses hands-on experience supporting large-scale distributed systems and production environments and can effectively assess technology risks using technical evidence and data-driven analysis. Key Responsibilities Availability & Reliability Risk Oversight • Independently assess availability, reliability, and resilience risks across critical services, cloud platforms, infrastructure, applications, and third-party dependencies. • Evaluate technology risks in relation to service criticality, customer impact, operational resilience requirements, and Visa's risk appetite. • Provide effective challenge and oversight of engineering processes, reliability practices, and control effectiveness. Risk Assessment & Control Assurance • Develop and execute risk-based assurance reviews focused on availability, reliability, and operational resilience controls. • Assess both design adequacy and operating effectiveness of technology controls using objective technical evidence. • Define testing methodologies, sampling approaches, evidence requirements, and assessment criteria. • Review system configurations, telemetry, deployment records, incident data, recovery testing results, and operational metrics to validate control performance. • Use scripting, automation, and data analysis techniques to support repeatable testing and evidence-based conclusions. • Document findings, assess residual risk, and validate remediation activities through closure. Incident Learning & Recovery Assurance • Review significant service disruptions, recurring incidents, near misses, and post-incident analyses. • Evaluate the quality of root cause analysis, contributing factors, customer impact assessments, and corrective action plans. • Assess disaster recovery, resilience testing, and recovery-exercise outcomes to ensure alignment with recovery objectives and resilience expectations. Reliability Metrics & Risk Reporting • Define, monitor, and report key risk indicators (KRIs) and reliability metrics related to service availability and operational resilience. • Assess trends related to SLO attainment, outage frequency and duration, error-budget consumption, recovery performance, change failure rates, capacity utilization, and control deficiencies. • Prepare executive-level reporting and risk insights for technology governance forums, senior leadership, and risk committees. • Communicate business exposure, emerging risks, remediation progress, and reliability trends in a clear and concise manner. AI-Enabled Risk Analysis & Assurance • Leverage approved AI and automation capabilities to improve analysis of incident data, control evidence, technical documentation, and testing activities. • Validate AI-generated outputs through independent review and source evidence verification. • Ensure appropriate governance, traceability, data protection, and human accountability within AI-supported assurance processes. Stakeholder Engagement • Build effective partnerships across Engineering, SRE, Architecture, Cybersecurity, Business Continuity, and Technology Risk teams. • Influence stakeholders to strengthen reliability, resilience, and control maturity across critical technology services. • Provide subject matter expertise and independent challenge during risk reviews, resilience assessments, and remediation discussions. Qualifications Basic Qualifications • 8 or more years of relevant work experience with a bachelor’s degree, OR 5 or more years of relevant work experience with an Advanced Degree (e.g., Master's, MBA, JD, MD), OR 2 or more years of work experience with a PhD, OR 11 or more years of relevant work experience. • Hands-on experience in Software Engineering, Site Reliability Engineering (SRE), Production Engineering, Platform Engineering, Infrastructure Engineering, or a comparable role supporting business-critical systems. • Strong understanding of distributed systems, networking, databases, cloud infrastructure, observability platforms, service dependencies, high availability architectures, fault tolerance, and disaster recovery. • Experience conducting technology risk assessments and evaluating the effectiveness of technical controls. • Demonstrated ability to perform control testing, evidence evaluation, issue documentation, and remediation validation. • Proficiency with scripting or data analysis tools such as Python, SQL, or equivalent technologies. • Ability to interpret operational telemetry, reliability metri