Compliance & Risk Consultant

About Us
Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

We are seeking a Compliance & Risk Consultant to support operations of the Visa Account Information Security (AIS) compliance program, with a focus on VisaNet Processors, Card Vendors, and related service providers in North America.

This role requires someone who can independently manage a portfolio of direct-program compliance cases, identify when issues require escalation, prepare clear risk-based summaries for leadership, and drive cross-functional stakeholders toward timely resolution.

The consultant will develop into a subject matter expert (SME), ensuring consistent application of Visa Rules and security standards while exercising sound judgment in client, stakeholder, and enforcement discussions.

Because VisaNet Processors and Card Vendors operate under direct relationships with Visa, this role requires a high standard of diligence. The consultant will help manage direct-program risk by ensuring these entities continue to meet Visa’s security, operational, contractual, and program expectations throughout the relationship lifecycle, from onboarding and annual validation through issue remediation, escalation, and potential enforcement action.

Key Responsibilities:

Compliance Program Execution, Portfolio Ownership & Case Management

• Execute compliance activities across multiple programs, including onboarding, annual validation, ongoing monitoring, and lifecycle changes for VisaNet Processors and Card Vendors.
• Assess onboarding, renewal, continuation, restriction, or termination risks by considering compliance status, contractual obligations, operational dependencies, security posture, and unresolved remediation issues.
• Review compliance documentation, including Reports on Compliance (ROC) and Attestations of Compliance (AOC), to confirm adherence to applicable standards and identify gaps or risks.
• Maintain ownership of assigned entities, proactively identifying overdue items, deficiencies, aging cases, and emerging risks, and driving remediation through closure.
• Support enforcement and direct-program decisions by documenting non-compliance issues and preparing decision-ready case summaries for leadership review and escalation.
• Maintain accurate compliance records and reporting that provide visibility into portfolio health, aging items, risk exposure, and enforcement readiness.

Policy, Standards Enforcement & Escalation Management

• Apply Visa Rules, PCI security standards, contractual expectations, and program-specific requirements consistently across assigned entities.
• Evaluate exception and waiver requests by assessing risk, supporting justification, and compensating controls within established governance frameworks.
• Provide clear guidance to stakeholders by translating requirements into actionable expectations and remediation steps.
• Own escalation management for assigned matters, including issue triage, stakeholder follow-up, status tracking, and timely resolution of cases requiring governance review or direct-program risk decisions.

Stakeholder Engagement & Communication

• Serve as a primary point of contact for internal teams, clients, VisaNet Processors, and Card Vendors on compliance matters.
• Develop communications that clearly outline requirements, required actions, timelines, and consequences of non-compliance.
• Exercise judgment in client and stakeholder discussions by knowing when to clarify requirements, when to push for action, and when to escalate sensitive or unresolved matters.
• Coordinate with Sales, Client Services, Product/Technology, Regional Risk, and Compliance teams to resolve issues and align on next steps.

Program Enhancement & Collaboration

• Identify opportunities to improve program effectiveness by reducing manual follow-up, strengthening tracking discipline, improving case visibility, and addressing operational inefficiencies.

This position is a Hybrid role to be located in our Foster City, CA office location. Visa requires at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.

Qualifications

Basic Qualifications:

• 5 or more years of relevant work experience with a Bachelors Degree or at least 2 years of work experience with an Advanced degree (e.g. Masters, MBA, JD, MD) or 0 years of work experience with a PhD

Preferred Qualifications:

• 6 or more years of work experience with a Bachelors Degree or 4 or more years of relevant experience with an Advanced Degree (e.g. Masters, MBA,  JD, MD) or up to 3 years of relevant experience with a PhD
• Bachelor’s degree or equivalent professional experience.
• Ability to work a schedule aligned to U.S. business hours to ensure real-time collaboration with clients and global teams
• 8+ years of experience in compliance program administration, case management, or risk oversight in financial services, payments, or related industries.
• Strong organizational and case management skills, with the ability to manage multiple deadlines and drive issues to closure.
• Strong written and verbal communication skills, including the ability to prepare clear case summaries for internal and external audiences.
• Ability to assess third-party or direct-program risk by weighing compliance evidence, contractual obligations, operational impact, and unresolved issues.
• Experience with compliance tracking systems, reporting tools, and data reconciliation.
• Familiarity with PCI DSS/CPP principles or payment industry compliance programs (not required to be a technical auditor).
• Experience in issuing/acquiring industry, third-party oversight, or similar regulatory/compliance functions.
• Experience working with technology teams to define requirements and deliver enhancements.
• Prior experience in an enforcement or compliance focused role, either in the financial industry or PCI area of focus

U.S. Applicants Only

Work Hours

Varies upon the needs of the department.

Travel Requirements

This position requires travel 5-10% of the time.

Mental/Physical Requirements

This position will be performed in an office setting. The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers.

Visa is an EEO Employer