Information Security Risk Manager

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

Description

The Information Security Risk Manager is responsible for managing the Global Information Security risk program across eBay.  This individual will work directly with business leaders to understand security and risk issues; oversee risk management and assessment efforts; and develop effective remediation programs.  Execution of these programs is critical to the success of this position.

We seek a candidate with strong security, technology, compliance, risk, and leadership skills. They must have experience with Information Security and risk oversight practices and principles. The role also requires a willingness to work hard as part of a terrific team.

Responsibilities

• Lead and govern the measurement and reporting of risks across eBay and financial services functions including documentation updates, scoping, assessments, management reporting, and driving remediation of issues!

• Establish, monitor, and report Key Performance Indicators and Key Risk Indicators.

• Participate in setting strategic direction for the Information Security program.

• Communicate and present key security risks at a variety of levels including business and technology leaders to ensure a clear understanding of these risks.

• Provide leadership in maturing the Information Security risk management program including the enterprise security reporting and metrics processes to meet the ongoing needs of the business.

• Ensure consistency to eBay’s security policies, standards, and methodologies.

• Identify and drive automation and efficiencies within the risk management program.

• Coordinate with Enterprise Risk Management, Internal Audit and other groups responsible for risk management areas 

• Use industry resources and security domain experts to develop industry leading risk management solutions and approaches.

• Must be able to collaborate and coordinate work efficiently and effectively with business colleagues and vendors in global locations and time zones.

Skills and Qualifications:

• 5+ years progressive experience in developing and managing an Information Security risk management program within a large multinational company.

• Good understanding of information security principles and risk management methodologies.

• Ability to maintain a long-term strategic focus while working on short-term tactical goals.

• Solid technical understanding of IT systems, applications, networks, and databases.

• Extensive experience with security compliance tools (Service Now, Saleforce, etc).

• Strong written and verbal communication skills. Must be able to interface, influence, and coordinate work efficiently and effectively with business colleagues in multiple locations at all levels.

• Self-starter with leadership skills and the ability to manage multiple tasks concurrently.

• Strong project management, interpersonal, relationship building, collaboration and influencing skills.

• Proven track record of successfully managing and implementing security programs and projects.

• Strong analytical, organizational and decision making skills.

• Ability to quickly learn new environments and technologies.

• Must be organized, goal-oriented, and a self-starter.

• Experience working in a fast-paced, highly complex environment.

• Experience working with cross-functional teams to deliver results.

• Familiarity with compliance rul