Sr. Risk Management Manager, Global ERM

About Us Visa is a world leader in payments technology, facilitating transactions between consumers, merchants, financial institutions and government entities across more than 200 countries and territories, dedicated to uplifting everyone, everywhere by being the best way to pay and be paid. At Visa, you'll have the opportunity to create impact at scale — tackling meaningful challenges, growing your skills and seeing your contributions impact lives around the world. Join Visa and do work that matters – to you, to your community, and to the world. Progress starts with you. Job Description What's it all about? We are seeking a driven, engaging risk leader to serve as a Risk Business Partner within the Global Enterprise Risk Management (ERM) team, unlocking the value of strong risk management for the business and functional partners it serves. The role holder will own the risk partnership with the Data Privacy Office, extending to other organizations across Visa as the role's scope evolves, driving insight, challenge, and control testing that deepen the organization's risk profile. This is a leadership role for someone with deep knowledge and hands-on experience of data privacy requirements and operations, who also operates broadly across the ERM function to shape and deliver Policies, Procedures, Frameworks, and Standards. The role will be based in Atlanta, GA. What we expect of you, day to day: Own the risk business partnership with the Data Privacy Office (DPO), extending to other Visa organizations, driving alignment, insight, and business outcomes. Lead execution of the ERM program to the highest standard across the DPO (acting as Second Line of Defense), including the full Risk and Control Self-Assessment (RCSA) process and control testing for the DPO and any other function requiring RCSA execution. Partner with process owners across the DPO, the Global Data Office, and other organizations to identify risks and rigorously challenge the design and operating effectiveness of controls. Serve as the first point of contact and trusted risk advisor to the DPO, providing consistent, high-quality advice, guidance, and challenge on risk matters, and act as the conduit back into the ERM team. Champion risk culture, building risk partnerships that educate and embed risk management thinking across the organization. Unlock deep, forward-looking insight into the Data Privacy risk profile and, as the role's remit extends, other organizations, elevating that insight across the enterprise through proactive reporting to senior stakeholders. Develop, draft, and deliver risk reporting across the ERM team, informing Visa's broader risk profile. Lead deep dives, in partnership with the Director, to strengthen the control environment. Execute and lead complex risk assessments across ERM, the DPO, and the broader business to generate deep insight into the company's risk landscape. Develop and deliver aggregate risk reporting for all levels of the company. Monitor data quality within the risk system of record, challenging the first and second lines of defense to ensure the accuracy of risk records. Drive updates to ERM frameworks, both in written form and system execution — defining requirements, partnering with technology, and delivering testing. Design and deliver reporting across ERM's scope of influence, equipping regional risk owners and risk teams with a clear understanding of the risks, controls, issues, and events relevant to them. Proactively identify and solve problems across ERM, the DPO, and any other business or function as required. This position is a Hybrid role to be based in our Atlanta, GA office location. Visa   requires   at least 3 days in office, expectations of these days will be confirmed by your Hiring Manager.   Qualifications What we are after: An experienced risk professional, preferably with a major financial institution or payment card company, with extensive experience of evaluating and managing enterprise and operational risk in a regulated environment, preferably financial services. Basic Qualifications: 8 or more years of relevant work experience with a Bachelor Degree or at least 5 years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 2 years of work experience with a PhD Preferred Qualifications: 9 or more years of relevant work experience with a Bachelor Degree or 7 or more relevant years of experience with an Advanced Degree (e.g. Masters, MBA, JD, MD) or 3 or more years of experience with a PhD An experienced risk professional, preferably with a major financial institution or payment card company, with extensive experience of evaluating and managing enterprise and operational risk in a regulated environment, preferably financial services. 9+ years of relevant work experience with a Bachelor's degree, or 7+ years with an Advanced Degree (e.g. Masters, MBA, JD, MD), or 3+ years with a PhD. Deep knowledge and hands-on experience of data privacy requirements and operations, with experience across multiple privacy jurisdictions (e.g., GDPR, UK GDPR, PIPEDA, PIPL, Australian Privacy Act) strongly preferred. Professional privacy certification is a significant benefit (e.g. IAPP CIPM, CIPP/E, CIPP/US, or ISACA CDPSE). Understanding of the payments industry and/or financial services, payment products and services, and the wider economic/competitive landscape. Knowledge of legal and regulatory requirements for regulated entities and the payment card industry, including data privacy, preferably across multiple jurisdictions. Strong knowledge and application of Artificial Intelligence (AI), including building AI capabilities relevant to risk management. Significant experience evaluating the policies, processes, and controls associated with complex business and operational processes. Experience applying risk management practices as they relate to Enterprise and Operational Risk Management — risk appetite,