Information Security Risk Manager

Job description

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

Description

The Information Security Risk Manager is responsible for managing the Global Information Security risk program across eBay.  This individual will work directly with business leaders to understand security and risk issues; oversee risk management and assessment efforts; and develop effective remediation programs.  Execution of these programs is critical to the success of this position.

We seek a candidate with strong security, technology, compliance, risk, and leadership skills. They must have experience with Information Security and risk oversight practices and principles. The role also requires a willingness to work hard as part of a terrific team.

Responsibilities

• Lead and govern the measurement and reporting of risks across eBay and financial services functions including documentation updates, scoping, assessments, management reporting, and driving remediation of issues!

• Establish, monitor, and report Key Performance Indicators and Key Risk Indicators.

• Participate in setting strategic direction for the Information Security program.

• Communicate and present key security risks at a variety of levels including business and technology leaders to ensure a clear understanding of these risks.

• Provide leadership in maturing the Information Security risk management program including the enterprise security reporting and metrics processes to meet the ongoing needs of the business.

• Ensure consistency to eBay’s security policies, standards, and methodologies.

• Identify and drive automation and efficiencies within the risk management program.

• Coordinate with Enterprise Risk Management, Internal Audit and other groups responsible for risk management areas 

• Use industry resources and security domain experts to develop industry leading risk management solutions and approaches.

• Must be able to collaborate and coordinate work efficiently and effectively with business colleagues and vendors in global locations and time zones.

Skills and Qualifications:

• 5+ years progressive experience in developing and managing an Information Security risk management program within a large multinational company.

• Good understanding of information security principles and risk management methodologies.

• Ability to maintain a long-term strategic focus while working on short-term tactical goals.

• Solid technical understanding of IT systems, applications, networks, and databases.

• Extensive experience with security compliance tools (Service Now, Saleforce, etc).

• Strong written and verbal communication skills. Must be able to interface, influence, and coordinate work efficiently and effectively with business colleagues in multiple locations at all levels.

• Self-starter with leadership skills and the ability to manage multiple tasks concurrently.

• Strong project management, interpersonal, relationship building, collaboration and influencing skills.

• Proven track record of successfully managing and implementing security programs and projects.

• Strong analytical, organizational and decision making skills.

• Ability to quickly learn new environments and technologies.

• Must be organized, goal-oriented, and a self-starter.

• Experience working in a fast-paced, highly complex environment.

• Experience working with cross-functional teams to deliver results.

• Familiarity with compliance rules and regulations (GLBA, FFIEC, SOX, PCI DSS, ISO, Data Privacy laws).

Education and Certifications:

• A Bachelor’s Degree or equivalent experience in a related field is required.

• CISSP, CISM, CISA or equivalent preferred.

Travel:

• Ability to travel (domestic and international) as required.

Additional Details

The base pay range for this position is expected in the range below:

Base pay offered may vary depending on multiple individualized factors, including location, skills, and experience. The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave). Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

If hired, employees will be in an “at-will position” and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

Remote roles are not eligible for U.S. visa sponsorship.

eBay is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, and disability, or other legally protected status. If you have a need that requires accommodation, please contact us at talent@ebay.com. We will make every effort to respond to your request for accommodation as soon as possible. View our accessibility statement to learn more about eBay's commitment to ensuring digital accessibility for people with disabilities. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

We use cookies to enhance your experience and may use AI tools for administrative tasks in the hiring process. To learn how we handle your personal data and use AI responsibly, please visit our Talent Privacy Notice, Privacy Center and AI Hiring Guideline.