DescriptionThe Information Security Risk Manager is responsible for managing the Global Information Security risk program across eBay. This individual will work directly with business leaders to understand security and risk issues; oversee risk management and assessment efforts; and develop effective remediation programs. Execution of these programs is critical to the success of this position.We seek a candidate with strong security, technology, compliance, risk, and leadership skills. They must have experience with Information Security and risk oversight practices and principles. The role also requires a willingness to work hard as part of a terrific team. Responsibilities- Lead and govern the measurement and reporting of risks across eBay and financial services functions including documentation updates, scoping, assessments, management reporting, and driving remediation of issues!
- Establish, monitor, and report Key Performance Indicators and Key Risk Indicators.
- Participate in setting strategic direction for the Information Security program.
- Communicate and present key security risks at a variety of levels including business and technology leaders to ensure a clear understanding of these risks.
- Provide leadership in maturing the Information Security risk management program including the enterprise security reporting and metrics processes to meet the ongoing needs of the business.
- Ensure consistency to eBay's security policies, standards, and methodologies.
- Identify and drive automation and efficiencies within the risk management program.
- Coordinate with Enterprise Risk Management, Internal Audit and other groups responsible for risk management areas
- Use industry resources and security domain experts to develop industry leading risk management solutions and approaches.
- Must be able to collaborate and coordinate work efficiently and effectively with business colleagues and vendors in global locations and time zones.
Skills and Qualifications:- 5+ years progressive experience in developing and managing an Information Security risk management program within a large multinational company.
- Good understanding of information security principles and risk management methodologies.
- Ability to maintain a long-term strategic focus while working on short-term tactical goals.
- Solid technical understanding of IT systems, applications, networks, and databases.
- Extensive experience with security compliance tools (Service Now, Saleforce, etc).
- Strong written and verbal communication skills. Must be able to interface, influence, and coordinate work efficiently and effectively with business colleagues in multiple locations at all levels.
- Self-starter with leadership skills and the ability to manage multiple tasks concurrently.
- Strong project management, interpersonal, relationship building, collaboration and influencing skills.
- Proven track record of successfully managing and implementing security programs and projects.
- Strong analytical, organizational and decision making skills.
- Ability to quickly learn new environments and technologies.
- Must be organized, goal-oriented, and a self-starter.
- Experience working in a fast-paced, highly complex environment.
- Experience working with cross-functional teams to deliver results.
- Familiarity with compliance rules and regulations (GLBA, FFIEC, SOX, PCI DSS, ISO, Data Privacy laws).
Education and Certifications:- A Bachelor's Degree or equivalent experience in a related field is required.
- CISSP, CISM, CISA or equivalent preferred.
Travel:- Ability to travel (domestic and international) as required.
Additional DetailsThe base pay range for this position is expected in the range below:
$172,000 - $229,600
Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.
If hired, employees will be in an "at-will position" and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.
Remote roles are not eligible for U.S. visa sponsorship.
