Director, Cyber and Info Security Risk

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Description Summary:

We’re seeking a strategic and forward-thinking Director of Cyber and Information Security Risk to join our growing organization. This role will shape and lead our security risk management program, protecting our digital assets while enabling business growth.

As a member of PayPal’s Cybersecurity Governance, Risk, and Compliance organization, accountable to the CISO, you will build and lead a high-performing security risk team that plays a critical and foundational role in our overall enterprise security program. You will join a diverse and collaborative leadership team that works together to guide PayPal’s management of cyber and information security risks across the company, support compliance with evolving technology regulations and standards, and drive sound technology decision-making in support of the company’s mission and objectives.

Job Description:

In this role you will design and implement comprehensive cybersecurity risk and control frameworks and assessment methodologies. You will develop risk cybersecurity metrics and reporting for Board and executive stakeholders. You will partner with executives to drive security initiatives and risk-informed decision making.

In your day to day role you will:

• Lead with Vision: 
  • Develop and articulate a compelling vision and strategy to cohesively and accurately assess and report risk. 
  • Set clear goals and performance expectations and provide coaching and professional development opportunities to team members.
  • Foster an inclusive and diverse team environment that encourages creativity and new ideas.

• Inspire Innovation: 
  • Lead, mentor, and inspire a high-performing team of cybersecurity risk experts, fostering a culture of innovation, collaboration, and continuous improvement.
  • Support and develop transformation and continuous improvement within control management, risk assessment methodologies, and reporting governance. 

• Drive Engagement: 
  • Foster strong relationships with internal and external stakeholders, ensuring alignment and effective communication across teams.
  • Work closely with cybersecurity and business teams to explore new opportunities to drive security initiatives and clear understanding of risk. 

• Measure Impact: 
  • Continuously improve the learning journey by analyzing risk assessment results, metrics insights, testing findings, and feedback from partners, ensuring that our teams are always ahead of the curve.
  • Define key metrics and