Senior Manager, Agent Risk and Data Security

Team Summary 

Reporting to the VP, Payment Ecosystem Risk, the Payment Ecosystem Risk - Insights and Controls team is responsible for:  

• Design and Ownership of Ecosystem Risk programs focused on direct and indirect Visa clients ensuring the integrity and security of Visa’s payment ecosystem whilst supporting (new) business growth   

• Partnering with internal stakeholders in ensuring new Visa solutions are risk managed  

• Leading thought leadership and solutions in the risk and security space combatting payments fraud  

What a Senior Manager, Third-Party Agent Risk and Data Security does 

As a key member of the Ecosystem Risk Insights and Controls team, this role serves as the regional Subject Matter Expert (SME) for data security and Third-Party Agent (TPA) related risk programs. The position is responsible for overseeing the adherence to data security standards and the overall application these programs across AP markets, while providing expert client advisory, regulatory engagement, and industry representation. 

The role focuses on ensuring consistent application of global standards within the region, supporting clients and stakeholders in understanding and implementing program requirements, and representing Visa externally on data security and risk topics. 

In addition, the role includes targeted Risk Program Lifecycle responsibilities, focused on regional coordination, communication, analysis of client and market feedback, and analytics to ensure consistent rollout and visibility of program performance across AP, as well as strategic input to global program enhancements. 

Key Responsibilities 

Subject Matter Expertise and Client Advisory 

• Serve as the AP domain expert for data security and TPA-related risk programs, including Account Information Security (AIS), Third-Party Agent (TPA) Registration, Approved Vendor Program (AVP), 3D Secure Program, and Payment Card Industry Data Security Standard (PCI DSS) requirements 

• Provide consultative guidance to external stakeholders such as clients, large merchants, industry groups, and regulators, as well as internal stakeholders such as market risk managers, account executives, product, and other teams, on program requirements, compliance expectations, and risk mitigation best practices 

• Lead complex client and market escalations, providing clear, risk-based guidance aligned with Visa Rules and program intent 

• Represent Visa as a trusted advisor in client engagements, industry forums, and regulatory discussions 

Ownership of AP Execution and Market Enablement 

• Own the execution of data security and TPA-related programs across AP markets, ensuring consistent interpretation and application of global standards 

• Act as the primary regional point of contact for market and client queries related to program implementation 

• Drive market enablement through training sessions, workshops, and targeted communications to improve understanding and compliance 

• Ensure regional readiness for program updates, changes, and evolving requirements 

Regulatory and Industry Engagement 

• Represent Visa in engagements with regulators and industry bodies on data security and TPA-related topics 

• Support responses to regulatory inquiries and ensure alignment with evolving requirements across key AP markets 

• Monitor developments in data security standards, including PCI DSS, and translate implications into actionable guidance for stakeholders 

• Participate in industry forums, including PCI Security Standards Council community events 

Risk Program Lifecycle Management 

• Act as the AP coordination point between global program owners and regional stakeholders for all risk programs 

• Drive structured communication of program updates and requirements across AP markets to ensure clarity and consistency 

• Aggregate, analyze and synthesize regional feedback, execution challenges, and adoption gaps to inform global program enhancements 

• Develop and maintain AP-relevant reporting and insights to improve visibility into program performance and consistency 

• Produce, manage, and coordinate regional client and internal stakeholder education and training on all risk programs 

Data Security and Cyber Risk Coordination 

• Act as the regional coordination point for data security and related cybersecurity considerations within Visa risk programs 

• Support interpretation of PCI DSS and related ecosystem requirements, ensuring clear and aligned messaging across stakeholders 

• Collaborate with internal cybersecurity and risk teams to align on guidance and response to emerging data security risks 

What you will need:   

We are looking for a mid-career professional with a strong curiosity about payments and risk, who is detail-oriented, outcomes-driven, and comfortable owning complex problems in a dynamic environment. The ideal candidate brings a balance of analytical rigor, stakeholder influence, and program ownership. 

• 8-12 years of relevant experience in payments risk management, data security, cybersecurity, or related fields within financial services or payments ecosystems 

• Demonstrated ownership mindset, with the ability to independently drive initiatives end-to-end, make sound recommendations, and progress work through ambiguity and competing priorities 

• Strong program and process orientation, with the ability to design, evaluate, and improve programs and supporting tools across their lifecycle 

• Strategic mindset with the ability to both drive change management and program optimization with attention to detail while remaining aware of the big picture and taking a more holistic and strategic approach 

• Strong knowledge of data security standards, including PCI DSS, and experience applying these in practical, client-facing scenarios  

• Experience engaging with external stakeholders, including clients, regulators, and industry bodies  

• Demonstrated ability to operate as a Subject Matter Expert, providing clear, actionable guidance in complex or ambiguous situations  

• Strong stakeholder management and communication skills, with the ability to influence across functions and levels in a matrixed organization  

• Proven ability to manage multiple priorities and drive execution across markets in a fast-paced, dynamic environment  

• Proficiency in Excel and data analysis with experience in designing and monitoring metrics to measure risk performance and effectiveness 

Preferred Qualifications 

• Experience working across multiple Asia Pacific markets or in a regional role 

• Certification as a PCI Qualified Security Assessor 

• Familiarity with Third-Party Agent models, vendor risk management, and merchant/acquirer ecosystems 

• Experience participating in industry forums or regulatory engagements related to data security or payments risk 

• Analytical mindset with the ability to interpret risk trends and translate insights into actionable recommendations 

As the world's leader in digital payments technology, Visa's mission is to connect the world through the most creative, reliable and secure payment network - enabling individuals, businesses, and economies to thrive. Our advanced global processing network, VisaNet, provides secure and reliable payments around the world, and is capable of handling more than 65,000 transaction messages a second. The company's dedication to innovation drives the rapid growth of connected commerce on any device, and fuels the dream of a cashless future for everyone, everywhere. As the world moves from analog to digital, Visa is applying our brand, products, people, network and scale to reshape the future of commerce. 

At Visa, your individuality fits right in. Working here gives you an opportunity to impact the world, invest in your career growth, and be part of an inclusive and diverse workplace. We are a global team of disruptors, trailblazers, innovators and risk-takers who are helping drive economic growth in even the most remote parts of the world, creatively moving the industry forward, and doing meaningful work that brings financial literacy and digital commerce to millions of unbanked and underserved consumers. 

You're an Individual. We're the team for you. Together, let's transform the way the world pays.