Tech Risk Maturity Oversight Engineer

Technology and Information Security Oversight (TISO) is responsible for providing Second Line of Defense (SLOD) oversight function over Technology, Data and Security. The team provides risk visibility with risk trending and risk analysis to effectively challenge the capability provided by First Line of Defense (FLOD) organization. All risk disciplines ensure PayPal meets its regulatory and business objectives. The person will build NIST based Technology and Security Maturity Assessment and execute assessment across different business-technology organizations. This position requires building trusted partnership with First Line of Defenses (FLOD) in collaboration with Third Line of Defense (Audit) to develop clear mechanisms to provide risk transparency at the enterprise level.

The person will build NIST based Technology and Security Maturity Assessment and execute assessment across different business-technology organizations. This position requires building trusted partnership with First Line of Defenses (FLOD) in collaboration with Third Line of Defense (Audit) to develop clear mechanisms to provide risk transparency at the enterprise level.

The role will require broader understanding of technology and security to perform NIST based maturity assessment. The person will be responsible for building the assessment approach, driving the assessment, and aggregating the results for risk trending.

• Responsible for developing and implementing Enterprise Technology and Security Maturity Assessment
• Manage any external technology and security testing engagements to provide input to oversight on existing internal testing programs.
• Collaborate with other SLOD teams to build the scope and manage the expectations for all the activities.
• Experiences building, maturing and working as technology risk assessor
• Experience with security testing will be beneficial.
• Expertise in analyzing the results of an assessment to convert into meaningful business impact.
• Experience developing metrics with goal to provide risk trending over time.
• Experience building and automating assessment processes
• Collaborate with stakeholders to define and evolve Key Risk Indicators for the critical risk domains.
• Advise leadership on foundation process related risks and decisions.
• Actively contribute to PayPal security awareness and training programs.
• Represent TISO at various forums and leadership engagements
• Build sustaining relationships based on trust and mutual respect
• Willingness to contribute ideas and learn from others on the team.
• Strong quantitative and analytical abilities with deep understanding of how to develop relevant metrics that not only track activity but also quantify the impact of data and technology initiatives on the financial performance of the business.
• Excellent written and verbal communication skills.

Professional Qualifications:

• BS/BA degree required
• Industry certifications preferred
• 6+ years in experience working in Technology or security risk management
• A strong balance of strategic and analytic acumen, with a high level of intellectual agility and capacity for original and innovative thoughts.
• Ability to work in a cross functional/matrix environment with proven track record of delivery, through strong negotiation, influencing and relationship management skills.
• Ability to prioritize and multi-task in a fast-paced, high-growth environment