About Us

Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid.

At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world.

Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you.

Job Description

Team Summary

Reporting to the VP, Payment Ecosystem Risk, the Payment Ecosystem Risk - Insights and Controls team is responsible for: 

Design and Ownership of Ecosystem Risk programs focused on direct and indirect Visa clients ensuring the integrity and security of Visa's payment ecosystem whilst supporting (new) business growth  
Partnering with internal stakeholders in ensuring new Visa solutions are risk managed 
Leading thought leadership and solutions in the risk and security space combatting payments fraud

What a Senior Manager, Third-Party Agent Risk and Data Security does

As a key member of the Ecosystem Risk Insights and Controls team, this role serves as the regional Subject Matter Expert (SME) for data security and Third-Party Agent (TPA) related risk programs. The position is responsible for overseeing the adherence to data security standards and the overall application these programs across AP markets, while providing expert client advisory, regulatory engagement, and industry representation.

The role focuses on ensuring consistent application of global standards within the region, supporting clients and stakeholders in understanding and implementing program requirements, and representing Visa externally on data security and risk topics.

In addition, the role includes targeted Risk Program Lifecycle responsibilities, focused on regional coordination, communication, analysis of client and market feedback, and analytics to ensure consistent rollout and visibility of program performance across AP, as well as strategic input to global program enhancements.

Key Responsibilities

Subject Matter Expertise and Client Advisory

Serve as the AP domain expert for data security and TPA-related risk programs, including Account Information Security (AIS), Third-Party Agent (TPA) Registration, Approved Vendor Program (AVP), 3D Secure Program, and Payment Card Industry Data Security Standard (PCI DSS) requirements
Provide consultative guidance to external stakeholders such as clients, large merchants, industry groups, and regulators, as well as internal stakeholders such as market risk managers, account executives, product, and other teams, on program requirements, compliance expectations, and risk mitigation best practices
Lead complex client and market escalations, providing clear, risk-based guidance aligned with Visa Rules and program intent
Represent Visa as a trusted advisor in client engagements, industry forums, and regulatory discussions

Ownership of AP Execution and Market Enablement

Own the execution of data security and TPA-related programs across AP markets, ensuring consistent interpretation and application of global standards
Act as the primary regional point of contact for market and client queries related to program implementation
Drive market enablement through training sessions, workshops, and targeted communications to improve understanding and compliance
Ensure regional readiness for program updates, changes, and evolving requirements

Regulatory and Industry Engagement

Represent Visa in engagements with regulators and industry bodies on data security and TPA-related topics
Support responses to regulatory inquiries and ensure alignment with evolving requirements across key AP markets
Monitor developments in data security standards, including PCI DSS, and translate implications into actionable guidance for stakeholders
Participate in industry forums, including PCI Security Standards Council community events

Risk Program Lifecycle Management

Act as the AP coordination point between global program owners and regional stakeholders for all risk programs
Drive structured communication of program updates and requirements across AP markets to ensure clarity and consistency
Aggregate, analyze and synthesize regional feedback, execution challenges, and adoption gaps to inform global program enhancements
Develop and maintain AP-relevant reporting and insights to improve visibility into program performance and consistency
Produce, manage, and coordinate regional client and internal stakeholder education and training on all risk programs

Data Security and Cyber Risk Coordination

Act as the regional coordination point for data security and related cybersecurity considerations within Visa risk programs
Support interpretation of PCI DSS and related ecosystem requirements, ensuring clear and aligned messaging across stakeholders
Collaborate with internal cybersecurity and risk teams to align on guidance and response to emerging data security risks

Why this is important to Visa

Visa owns the most recognizable global brand in the financial services industry. As stakeholder and regulatory scrutiny on data security and third-party risk continues to increase across Asia Pacific, Visa's ability to provide consistent, credible, and expert guidance to clients, regulators, and industry partners is critical.

This role ensures that data security programs are executed effectively across diverse markets, strengthens Visa's position as a trusted advisor in the ecosystem, and supports the integrity and resilience of the payments network in an evolving risk and regulatory environment.

Qualifications

What you will need:  

We are looking for a mid-career professional with a strong curiosity about payments and risk, who is detail-oriented, outcomes-driven, and comfortable owning complex problems in a dynamic environment. The ideal candidate brings a balance of analytical rigor, stakeholder influence, and program ownership.

8-12 years of relevant experience in payments risk management, data security, cybersecurity, or related fields within financial services or payments ecosystems
Demonstrated ownership mindset, with the ability to independently drive initiatives end-to-end, make sound recommendations, and progress work through ambiguity and competing priorities
Strong program and process orientation, with the ability to design, evaluate, and improve programs and supporting tools across their lifecycle
Strategic mindset with the ability to both drive change management and program optimization with attention to detail while remaining aware of the big picture and taking a more holistic and strategic approach
Strong knowledge of data security standards, including PCI DSS, and experience applying these in practical, client-facing scenarios
Experience engaging with external stakeholders, including clients, regulators, and industry bodies
Demonstrated ability to operate as a Subject Matter Expert, providing clear, actionable guidance in complex or ambiguous situations
Strong stakeholder management and communication skills, with the ability to influence across functions and levels in a matrixed organization
Proven ability to manage multiple priorities and drive execution across markets in a fast-paced, dynamic environment
Proficiency in Excel and data analysis with experience in designing and monitoring metrics to measure risk performance and effectiveness

Preferred Qualifications

Experience working across multiple Asia Pacific markets or in a regional role
Certification as a PCI Qualified Security Assessor
Familiarity with Third-Party Agent models, vendor risk management, and merchant/acquirer ecosystems
Experience participating in industry forums or regulatory engagements related to data security or payments risk
Analytical mindset with the ability to interpret risk trends and translate insights into actionable recommendations

As the world's leader in digital payments technology, Visa's mission is to connect the world through the most creative, reliable and secure payment network - enabling individuals, businesses, and economies to thrive. Our advanced global processing network, VisaNet, provides secure and reliable payments around the world, and is capable of handling more than 65,000 transaction messages a second. The company's dedication to innovation drives the rapid growth of connected commerce on any device, and fuels the dream of a cashless future for everyone, everywhere. As the world moves from analog to digital, Visa is applying our brand, products, people, network and scale to reshape the future of commerce.

At Visa, your individuality fits right in. Working here gives you an opportunity to impact the world, invest in your career growth, and be part of an inclusive and diverse workplace. We are a global team of disruptors, trailblazers, innovators and risk-takers who are helping drive economic growth in even the most remote parts of the world, creatively moving the industry forward, and doing meaningful work that brings financial literacy and digital commerce to millions of unbanked and underserved consumers.

You're an Individual. We're the team for you. Together, let's transform the way the world pays.

Visa is an EEO Employer

Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status. Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

Senior Manager, Agent Risk and Data Security