דרושים Head Emea Tech Security Oversight ב-Paypal ב-Luxembourg, Luxembourg

Essential Responsibilities:

• Leverage specialized security governance and risk expertise to identify and address complex security risks, recommending best practices and determining new approaches that have an impact on broader security operations, while aligning strategies with business priorities
• Partner across teams and key stakeholders to drive security risk and governance initiatives, leading and solutioning complex projects and programs to strengthen overall security posture.
• Apply advanced analytical skills and sound judgment to assess and mitigate security risks, considering diverse perspectives and innovative solutions. Stay informed on industry trends and regulatory landscape while evaluating their security implications within the context of the PayPal’s governance framework.
• Directly contribute to improvements within the security domain and occasionally beyond, ensuring decisions lead to meaningful enhancements in risk mitigation strategies and overall security practices.
• Leverage relationships across teams, both within and outside of security, to influence initiatives and integrate feedback into security governance processes and risk management practices.
• Develop and articulate clear plans and priorities for the team, guiding them to achieve security risk and governance objectives while fostering a collaborative and high-performance environment.
• Lead by example, providing mentorship and support to ensure the team successfully executes on initiatives and goals.

Minimum Qualifications:

• Minimum of 8 years of relevant work experience and a Bachelor's degree or equivalent experience.

Preferred Qualification:

• Strong expertise and background in technology and cybersecurity risk management. Independent oversight and/or audit experience in an international organization is a plus.
• Excellent written and verbal skills; interpersonal and collaborative skills; and the ability to communicate information security related concepts to technical and non-technical audiences.
• Thorough understanding of the regulatory frameworks in the European Union including PSD2, DORA, and others.
• Professional credentials such as CISSP, CISM, CRISC, and knowledge of frameworks such as COBIT, NIST CSF, PCI DSS, and ISO27001 is a plus.

Our Benefits:

Any general requests for consideration of your skills, please

KeyResponsibilities:

• Provide second-line oversight for data management frameworks, ensuring that first-line teams execute processes that achieve consistent, accurate, and reliable risk data. Validate compliance with BCBS 239 principles and regulatory expectations such as timeliness, completeness, and integration of risk data systems.
• Ensure appropriate implementation of data management related governance structures, ensuring proper ownership, accountability, and effective control measures. Recommend refinements to internal processes to address gaps and enhance compliance readiness.
• Ensure first-line teams maintain scalable and efficient IT systems, data architecture, and automated workflows that meet ECB supervisory standards and industry best practices. Provide oversight to validate disaster recovery measures and system resilience under adverse conditions.
• Leverage risk reviews, stress-testing methodologies, and predictive analytics to assess data performance and aggregation effectiveness. Advise first-line teams on enhancements to elevate reporting quality andresponsiveness.
• Conduct gap analyses to evaluate alignment between first-line data governance practices and ECB requirements. Recommend and monitor corrective action plans to address identified deficiencies and ensure compliance readiness.
• Review and validate data governance policies and procedures developed by first-line teams, ensuring alignment with second-line expectations and regulatory standards. Partner with relevant stakeholders to ensure policies are seamlessly integrated into workflows across the European entity.
• Engage with PPEU and Global, Compliance, Technology, Legal, and Finance functions to foster a collaborative oversight process. Act as a key intermediary for regulators, auditors, and consultants, ensuring transparency and alignment with supervisory expectations.
• Oversee the quality and timeliness of regulatory reporting and risk metrics prepared by the operational teams, providing assurance that deliverables meet BCBS239 and ECB expectations. Proactively identify opportunities for refinement and process improvement in reporting practices.
• Establish oversight mechanisms, key performance indicators, and internal monitoring processes to evaluate the effectiveness of data governance practices and ensure sustained alignment with BCBS 239 principles.

Ideally, you'll have

• Bachelor’s or Master’s degree in Finance, Business Administration, IT, Data Management, or related field.
• Proven experience in data oversight, risk reporting, and regulatory compliance within financial services, payments, or technology industries.
• Deep knowledge of BCBS 239 framework, EBA guidelines, and ECB regulatory standards, with emphasis on second line of defense responsibilities for risk oversight and governance.
• Proven track record of overseeing the implementation of risk data aggregation controls, ensuring adherence to industry standards while driving operational improvements.
• Strong ability to manage cross-functional relationships, influence stakeholders at varying organizational levels, and foster collaboration across technical and business teams.
• Expertise in analytics for assessing and validating risk management practices under evolving regulatory conditions.

Our Benefits:

Any general requests for consideration of your skills, please

Key Responsibilities:

• Provide second-line oversight related to risk data aggregation, data integrity, and governance practices to ensure compliance with BCBS 239 principles, EBA guidelines, and ECB standards.
• Evaluate the implementation of risk data governance frameworks to ensure accuracy, consistency, and completeness in data reporting and aggregation. Identify inefficiencies or gaps in compliance and provide detailed recommendations for remediation.
• Review and validate policies, procedures, and data management controls developed by first-line teams to ensure alignment with regulatory standards and second-line expectations. Verify that policies are properly integrated into day-to-day workflows and processes.
• Analyze data quality metrics, risk reporting outputs, and key performance indicators to assess the performance of first-line data aggregation systems. Highlight trends, anomalies, or areas requiring improvement and prepare detailed findings for the Sr. Manager and stakeholders.
• Support the monitoring of compliance readiness and adherence to European regulatory requirements, including BCBS 239 and EBA guidelines, particularly focusing on risk data aggregation, reporting timeliness, and governance accountability.
• Assist in conducting gap analyses against regulatory expectations. Develop and monitor progress on corrective action plans to address compliance deficiencies and facilitate readiness for supervisory reviews.
• Prepare detailed reports, oversight assessments, and reviews for internal stakeholders, regulatory bodies, and auditors. Ensure all documentation demonstrates accuracy, clarity, and alignment with regulatory guidelines.

Ideally you'll have:

• Bachelor’s degree in Finance, Business Administration, Information Technology, Data Management, or a related field. A Master’s degree or professional certifications are considered a plus.
• Strong understanding of BCBS 239 principles, EBA guidelines, and ECB regulatory frameworks, with practical experience in second-line of defense roles or compliance monitoring.
• Working knowledge of SQL, Python and other data management tools
• Proven ability to evaluate complex data processes, assess risks, and recommend improvements to meet regulatory expectations.
• Hands-on experience analyzing data aggregation and reporting practices, with a focus on assessing completeness, accuracy, timeliness, and consistency.
• Solid interpersonal skills with the ability to foster effective cross-functional collaboration, particularly with risk, compliance, and technology teams.

Our Benefits:

Any general requests for consideration of your skills, please

Key Responsibilities

• Define the specifications and methodology for the stress testing program, ensuring alignment with ECB and other applicable EU regulatory requirements, in particular for systemically important institutions.
• Lead the coordination and definition of key stress testing assumptions (macro, idiosyncratic, and reverse stress scenarios) with internal stakeholders and expert teams across risk, finance, and business lines.
• Oversee and ensure the ongoing adequacy, calibration, and fit-for-purpose operation of stress testing models and engines.
• Interpret, review, and document all stress test results, including the rationale for key assumptions and their impacts on capital, liquidity, and solvency positions.
• Present stress testing methodology and outcomes to senior management, risk committees, and regulatory bodies (ECB, CSSF) as required, articulating material risks and model limitations in a clear and concise manner.
• Maintain up-to-date documentation and process control for all elements of the stress testing lifecycle, including scenario selection, data inputs, model parameters, and reporting outputs.
• Monitor market and regulatory developments, proactively enhancing the stress testing framework to ensure best-in-class standards and ongoing regulatory compliance (ECB Guide on ICAAP/ILAAP, EBA Guidelines, CRR).
• Assist with the integration of stress testing outcomes into risk appetite, capital planning, recovery planning, and other strategic processes (e.g., ICAAP/ILAAP, SREP submissions).
• Support ad hoc regulatory data requests, internal reviews, audits, and examinations related to stress testing frameworks and outcomes.

Ideally, you would have

• 7+ years of experience in stress testing, risk management, or quantitative analytics within a regulated EU/EEA banking environment, ideally with direct exposure to ECB SSM supervision.
• Proven track record in leading or coordinating stress testing or capital planning projects
• Hands-on experience with quantitative modeling and scenario design.
• Master’s degree in finance, economics, quantitative discipline, or related field; professional certification (CFA, FRM, PRM, CQF) advantageous.
• Strong analytical skills and attention to detail, with outstanding verbal and written communication abilities.
• Capacity to interpret complex technical results for diverse audiences up to senior executive and regulator level.
• Proven experience working in a fast-paced, international environment, managing multiple stakeholders and deadlines.

Our Benefits:

Any general requests for consideration of your skills, please

Key activities of the role include:

• Serve as the main contact for global credit risk oversight teams, as well as local and global first line teams, ensuring compliance of PayPal credit risk management wth EU and Luxembourg regulatory requirements
• Actively participate in new credit product launches, ensuring soundness of the set up as well as compliance with local regulatory requirements
• Monitoring performance of the creidt portfolios, identification of early trends and close involvement of definition of remediation plans as needed
• Establishing monitoring and oversight of effectiveness of credit strategies, independently analyzing and interpreting credit data
• Participate in definition of credit risk appetite, in close collaboration with local and global teams, ensuring alignment with strategic objectives as well as full compliance with EU regulatory requirements. Ensuring robust governance of risk appetite, including escalation of breaches.
• Perform independent calculation of a set of metrics (risk appetite, performance, etc.) as a form of control over quality of the data provided by first line teams
• Participate closely and ensure second line oversight of reserving, overlay definition and reserve model changes.
• Review and challenge credit policies and procedures established by first line of defence
• Actively paticipate in internal governance related to credit risk oversight, and rpovide documented second line challenge of the respective proposals
• Establish and maintain independent second line reporting related to credit risk

• 5-7 years in credit risk management or credit risk oversight
• Strong knowledge of credit origination process and credit models
• Working knowledge of SQL, Python/R a strong plus
• FRM or similar professional certification is a strong plus
• Strong knowledge of EU and local Luxembourg regulations
• Ability to work in a dynamic work environment, prioritize tasks and establish strong working relationships with a variety of stakeholders

Our Benefits:

Any general requests for consideration of your skills, please

Meet our team

• The International Technology and Information Security Oversight team enables PayPal's regulated entities to deliver secure and reliable products and services by maintaining trust, compliance, and innovation.

• Teamprovides PayPal’s regulated entitieswith essential oversight toensure that
  technology and security risks aremanagedand business requirements are addressed comprehensively and effectively.

Your work will be instrumental in strengthening the resilience of PayPal's operations in the EMEA region. You'll help ensure that:

• Technology and cybersecurity risks are managed effectively.

• Regional Board and Management receive accurate and timely information to enable informed decisions.

• Innovation, new products, and key business initiatives are enabled to achieve international reach.

• Products and services are built and maintained to reliably and securely serve our customers.

• Regulatory obligations are identified, implemented, and fulfilled consistently and evidently.

Your day-to-day

In your day-to-day role you will;

• Lead the Technology and Information Security Oversight function in the EMEA region to driveindependent oversight and effective challenge of technology and information security.

• Advise the business leaders about risk posture and risk priorities including the emerging risks and the organization’s effectiveness in addressing the risk.

• Act as a trusted advisor in regional governance committee and forums to provide subject matter expertise in technology and information security.

• Validate that the controls that detect, prevent and recover from the emergence of IT security related risks are properly designed, implemented, operated, documented, and monitored.

• Collaborate with regional and global stakeholders to address the regulatory inquiries, exams and reporting obligations.

• Lead or participate in global efforts to strengthen the technology and security risk management of the international regulated entities.

Our Benefits:

Any general requests for consideration of your skills, please

Job Description:

Our Benefits:

Any general requests for consideration of your skills, please