Manager, Cybersecurity Risk

PayPal • Chicago, IL

72d • $100,500 - $173,250 • Hybrid

About The Position

We're seeking an experienced technology professional to lead oversight efforts in the area of Third Party Technology and Security practices across the enterprise. This role requires deep expertise in vendor risk management, supply chain security, third-party governance frameworks, and continuous monitoring capabilities. As part of the Technology and Security Oversight team, you will be instrumental in establishing and maintaining a comprehensive oversight framework for third-party relationships and vendor risk management activities.

Requirements

• 5+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience.
• 7+ years in technology risk, cybersecurity, or IT audit; 4+ years directly focused on third-party/vendor risk.
• Advanced knowledge of third-party risk assessment frameworks, including Shared Assessments SIG, ISO 27001/27002, SOC 2 Type II attestations, and vendor security control validation methodologies.
• Demonstrated experience with vendor technology and security due diligence, criticality segmentation and exit-strategy planning.
• Deep understanding of continuous attack-surface monitoring tools, vendor security rating platforms, and automated evidence collection for third-party attestation tracking.
• Knowledge of current and emerging third-party risks (e.g., supply chain attacks, fourth-party risks, AI/ML vendor risks); vendor cybersecurity threats and vulnerabilities; industry standard control frameworks (e.g., NIST Cybersecurity Framework, ISO 27000 series); and prominent data privacy and security regulations globally.
• Strong work ethic with proven ability to learn quickly, prioritize work, and manage complex deliverables to completion under established deadlines.
• Superb consultative, adjudicative, investigative, and influencing skills, including business acumen, stakeholder empathy, and conflict resolution.
• Exceptional verbal and written communication and analysis skills, including experience developing high-quality written analysis, strategy, or standards documents.
• Unquestionable professional and ethical integrity, ideally demonstrated through experience with projects of a sensitive, privileged, or confidential nature.
• Ability to approach and understand problems from a statistical or quantitative perspective and draw meaningful, accurate conclusions.

Nice To Haves

• Degree in a relevant discipline, such as cybersecurity, business, engineering, risk management, or computer science.

Responsibilities

• Leverage specialized security governance and risk expertise to identify and address complex security risks, recommending best practices and determining new approaches that have an impact on broader security operations, while aligning strategies with business priorities.
• Partner across teams and key stakeholders to drive security risk and governance initiatives, leading and solutioning complex projects and programs to strengthen overall security posture.
• Apply advanced analytical skills and sound judgment to assess and mitigate security risks, considering diverse perspectives and innovative solutions.
• Stay informed on industry trends and regulatory landscape while evaluating their security implications within the context of the PayPal's governance framework.
• Directly contribute to improvements within the security domain and occasionally beyond, ensuring decisions lead to meaningful enhancements in risk mitigation strategies and overall security practices.
• Leverage relationships across teams, both within and outside of security, to influence initiatives and integrate feedback into security governance processes and risk management practices.
• Develop and articulate clear plans and priorities for the team, guiding them to achieve security risk and governance objectives while fostering a collaborative and high-performance environment.
• Lead by example, providing mentorship and support to ensure the team successfully executes on initiatives and goals.

Benefits

• Flexible work environment
• Employee shares options
• Health and life insurance
• Annual performance bonus
• Equity compensation
• Medical, dental, and vision benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Credit Intermediation and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees