Risk Management Specialist 3

eBay • San Jose, CA

6d • Hybrid

About The Position

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all. About the team and the role: eBay Commerce Inc. a wholly-owned subsidiary of eBay, Inc., seeks Risk Management Specialist 3 in San Jose, CA What you will accomplish: Job Duties: Conduct technology compliance reviews to assess and review compliance with legal, regulatory, and internal company policy requirements. Work with the business and other stakeholders to craft appropriate remedial actions to mitigate identified risks. Develop and maintain effective partnership with the other partnering functions including information security, ERM, and compliance. Plan inspections and reviews by assessing key risks pertinent to the business, capturing records, developing detailed test plans, and analyzing the information to identify control issues. Support business unit management by researching questions or handling IT compliance-related issues as they arise, escalating when appropriate. Write reports presenting review results, articulating the rationale for findings, the risks posed, and actions required to address those risks. Meet standards for delivering high quality beneficial compliance risk reviews. Partial telecommuting permitted from within a commutable distance.

Requirements

• Master’s degree, or foreign equivalent, in Computer Science, Information Management, or a closely related field, plus two years of experience in the job offered or a related occupation.
• IT General Controls - Logical Access, Operations and Change Management (2years)
• Testing application controls, business controls and entity level controls (2 years)
• SOX Compliance (1 year)
• Knowledge of NIST, ITIL, ISO27001, SOC compliance frameworks (2 years)
• Management of complex testing environments in technology and definition of new plans (2 years)
• Knowledge of regulated environments (2 years)
• Knowledge of incident management processes in complex technology environments (1 year)
• Risk based approach to new IT control definition and choice (1 year)
• Must be legally authorized to work in the U.S. without sponsorship.

Responsibilities

• Conduct technology compliance reviews to assess and review compliance with legal, regulatory, and internal company policy requirements.
• Work with the business and other stakeholders to craft appropriate remedial actions to mitigate identified risks.
• Develop and maintain effective partnership with the other partnering functions including information security, ERM, and compliance.
• Plan inspections and reviews by assessing key risks pertinent to the business, capturing records, developing detailed test plans, and analyzing the information to identify control issues.
• Support business unit management by researching questions or handling IT compliance-related issues as they arise, escalating when appropriate.
• Write reports presenting review results, articulating the rationale for findings, the risks posed, and actions required to address those risks.
• Meet standards for delivering high quality beneficial compliance risk reviews.

Benefits

• The total compensation package for this position may also include other elements, including a target bonus and restricted stock units (as applicable) in addition to a full range of medical, financial, and/or other benefits (including 401(k) eligibility and various paid time off benefits, such as PTO and parental leave).
• Details of participation in these benefit plans will be provided if an employee receives an offer of employment.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees