Visa's Cyber Security team is seeking a highly skilled Associate Cybersecurity Analyst to manage and onboard applications within Visa’s ecosystem into IAM (Identity and Access Management) governance. We are looking for a passionate, talented team player with a strong problem-solving mindset and coding/scripting skills, capable of thriving in a dynamic environment. The ideal candidate will be dedicated to meeting service level agreements within tight timeframes and comfortable engaging with both business and technical stakeholders to perform the core application access governance responsibilities.
Essential Functions:
Understand Application Architecture: Facilitate the standardization of application authentication and authorization processes.
Automate Reporting and Monitoring: Automate reporting, KPI tracking, and control effectiveness monitoring to support audits.
Gather Audit Evidence: Automate the collection of audit evidence.
Decommission Non-Standard Applications: Automate procedures for applications that cannot be standardized and can be decommissioned.
Enroll Applications: Integrate applications and components into IAM governance and identity management systems.
Govern Appliances: Enroll and govern appliances under IAM governance.
Data Analysis: Perform data analysis to validate control operations and ensure sustainability.
Integrate AI Technologies: Incorporate AI and Gen AI technologies into IAM processes to enhance security and automation.
Support Audit findings: Understand and interpret audit requests, ensuring accurate and timely responses. Assist in the identification and remediation of IAM-related audit findings.
Develop IAM Frameworks: Create and maintain IAM governance frameworks, policies, and procedures to meet audit requirements.
Ensure Compliance: Ensure IAM processes comply with relevant regulatory and industry standards.
Manage Changes: Effectively manage changes within IAM operations to ensure minimal disruption.
Inspect Security Configurations: Inspect IAM security configurations based on application criticality classification that cannot be automatically validated.
This is a hybrid position. Expectation of days in office will be confirmed by your hiring manager.