What you need to know about the role
Your day to day
- In your day to day role you will create a culture of effective risk management, accountability, and demonstration of risk awareness across the organization.
- Coordinate issue remediation efforts while collaborating with all IT and Business lines. Translate technical risks into business terms to promote effective communication and develop and coach teams to be able to identify, manage, and escalate risk.
- Lead independent and cross-functional projects to evaluate high-priority security and technology topics, issues, and risks in relation to PayPal’s products, people, processes, and technology.
- Work with key partners to propose, assess, frame, and advocate for changes to PayPal’s technology and cybersecurity practices, including requirements, guidance, roles, responsibilities, and strategy, based on evolving technologies, risks, industry standards, and compliance requirements.
- Identify and document key decision points, cost-benefit analysis, business trade-offs, technical and security risks, and other relevant factors for decision-makers related to technology and cybersecurity.
- Establish trusted working relationships with key partners across engineering, architecture, risk management, compliance, legal, communications, government relations, and oversight teams.
- Foster alignment with key partners on risk response proposals and implementation plans based on industry best practices, regulatory requirements, and organizational risk tolerance.
- Prepare working and executive-level reports, memos, and presentations to communicate complex concepts, risks, and recommendations in a clear and concise manner.
What do you need to bring
- Knowledge of current and emerging information technologies (e.g., AI / ML); cybersecurity threats and vulnerabilities; risk management processes and practices; industry standard control frameworks and best practices (e.g., NIST, ISO); and prominent cybersecurity and privacy regulations globally.
- Strong work ethic with proven ability to learn quickly, prioritize work, and manage complex deliverables to completion under established deadlines.
- Willingness to drill down into complex topics as needed to understand and validate key tactical or technical details with strategic level implications, and ability to identify and articulate those “big picture” considerations for key audiences.
- Superb consultative, adjudicative, investigative, and influencing skills, including business acumen, stakeholder empathy, and conflict resolution, as well as general comfort working in a dynamic, global, fluid, and matrixed working environment.
- Exceptional verbal and written communication and analysis skills, including experience developing high-quality written analysis, strategy, or policy documents
- Prior involvement in analysis, interpretation, and communication of legal or regulatory technology policy requirements.
- Practiced at targeting and delivering written work product and verbal presentations to varied audiences (e.g., executives, engineers, customers, regulators, etc.)
- Unquestionable professional and ethical integrity, ideally demonstrated through experience with projects of a sensitive, privileged, or confidential nature.
- Ability to approach and understand problems from a statistical or quantitative perspective and draw meaningful, accurate conclusions, as well as scrutinize models and inferences for misleading or overlooked considerations
- Master’s Degree in a relevant discipline, such as cybersecurity, business, public policy, economics, statistics, risk management, or computer science; outstanding Bachelor’s Degree candidates will be considered.
- Certifications preferred: CISM, CISA, CISSP, CGEIT, AAIA
- 10+ years total experience in technology or security governance, policy, risk management, and / or compliance roles.
Travel Percent:
The total compensation for this practice may include an annual performance bonus (or other incentive compensation, as applicable), equity, and medical, dental, vision, and other benefits. For more information, visit .
The US national annual pay range for this role is $152,500 to $262,350
Our Benefits:
Any general requests for consideration of your skills, please