Sr Director, Technology Risk Oversight

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy. 

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade. 

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Description Summary:

The Technology and Information Security Oversight Leader is responsible for tech and security risk across the organization globally and its branded affiliates. The leader in this role will report to the Chief Enterprise Risk Officer, and will be accountable for providing governance, guidance, and independent oversight of tech and security risk management, including challenge to first line of defense, transformational office, business units and functional groups. This role is also responsible for providing strategic direction, program governance leadership, interacting with top senior Technology and Business leaders. The Technology and Information Security Oversight Leader will also implement the enterprise-wide Risk and Compliance Framework for Tech and Security, including the ongoing monitoring, reporting, and escalation of risks, identification of emerging trends, provide best practices in risk, and providing input from a Tech and Security risk perspective on key technology initiatives, third party supplier activities, info security developments and other key areas. This leader will regularly have interactions with senior executive leaders including the Chief Risk Officer and the Chief Information Security Officer of the firm.

Job Description:

Key Responsibilities:

• Monitor and report on Technology and Security risk across PayPal and its branded affiliates globally.
• Collaborate and coordinate with other risk and control functions such as ERM, ORM, Compliance, Information Security, and Internal Audit to support an integrated risk management approach, and escalation of key issues.
• Conduct reporting to senior leadership, including the Chief Risk Officer, Chief Enterprise Risk Officer, Chief Information Security Officer, and International Boards and Risk Committees.
• Implement mechanisms to identify emerging trends and leading practices with respect to technology architecture, resiliency, cyber risk protocols (tools, policies, capabilities, and remediation planning)
• Design and architect risk management methodologies, risk metrics, technology enablement to support risk programs, change management initiatives and strategies
• Work with independent third parties to conduct threat assessments, penetration tests and key desktop exercises
• Lead efforts to initiate Phishing testing within the firm
• Lead regulator interactions, discuss important matters and present a consolidated view, lead regulatory remediation efforts, and understand requirements and expectations from regulatory bodies, based on previous extensive experience
• Mai