What are the responsibilities and job description for the Associate Cybersecurity Engineer position at Visa?
As an integral member of the Cybersecurity Governance, Risk & Compliance (GRC) and M&A Integration teams, the Associate Cybersecurity Engineer supports critical security operations that protect enterprise systems and data. This role focuses on managing cryptographic keys and certificates and performing Identity & Access Management (IAM) tasks to ensure secure access across the organization. The position is responsible for maintaining compliance with industry standards such as PCI DSS, PCI 3DS, and other regulatory requirements, while collaborating with internal teams and external partners to strengthen security posture during business integrations and ongoing operations.
Essential Functions:
- Manage cryptographic keys and certificates throughout their lifecycle (generation, storage, rotation, and destruction) and ensure compliance with security standards.
- Provide first-line support for certificate and IAM-related issues, escalating complex problems as needed.
- Develop and maintain processes and documentation for certificate/key management and IAM operations.
- Provision and deprovision of user accounts and assist with User Access Reviews (UARs) to ensure proper access alignment.
- Coordinate with internal and external stakeholders for certificate renewals and IAM compliance requirements.
- Collaborate with Cybersecurity team members to deploy, tune, and report on IAM tooling, including integration with enterprise systems.
- Track and report key metrics for IAM and cryptographic operations, including KPIs and compliance indicators.
- Develop, maintain, and update automation scripts and workflow (Python, PowerShell, or similar) to optimize certificate/key management and IAM processes.
- Leverage Generative AI (GAI) and automation platforms to streamline data collection, validation, and reporting for IAM and cryptographic operations, reducing manual effort and minimizing errors.
- Ensure adherence to cybersecurity best practices, policies, and regulatory requirements (PCI DSS, PCI 3DS, ISO, NIST).
This is a hybrid position. Expectation of days in the office will be confirmed by your Hiring Manager.