Security TPM

eBay•Remote Texas, TX

1d•$111,200 - $190,100•Remote

About The Position

At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We’re committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts. Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet. Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all. Job Description: Security TPM Overview We are seeking a highly motivated Security Technical Project Manager to join our growing team as we expand into newly acquired business adjacencies. This individual will help drive information security onboarding across acquired companies’ applications, infrastructure, and vendor ecosystems, ensuring alignment with corporate information security standards, policies, and industry best practices. The Security M&A Analyst will act as a liaison between the security organization, cross-functional partners, and acquired company engineering, IT, compliance, and business teams. The role will coordinate and collect metrics on key initiatives such as vendor security reviews, IAM/SSO onboarding, infrastructure hardening, PCI compliance, vulnerability management, and security design reviews for critical applications and product launches.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience.
3+ years of experience managing or supporting security-focused technical projects or programs.
Experience supporting security initiatives related to cloud security, vulnerability management, infrastructure security, and IAM/SSO.
Ability to work effectively with cross-functional teams to coordinate tasks, manage multiple priorities, and track project timelines.
Strong written and verbal communication skills, with the ability to clearly document and communicate security-related information to both technical and non-technical audiences.
Technical Degree or related Cyber Security experience
Strong understanding of architecture-level information security and appropriate use enforcement technology solutions
Strong understanding of systems development life cycle to lead multi-functional projects or initiatives.

Nice To Haves

Familiarity with cloud environments such as AWS, GCP, or Azure.
Exposure to information security program implementation or compliance management activities.
Interest in or pursuit of relevant certifications (e.g., CISSP, CISM, CISA, PMP, or cloud security certifications such as CCSK or CCSP).
Strong problem-solving skills, with the ability to identify issues and support pragmatic remediation approaches.
Certification such as Certified Information System Security Professional (CISSP) or Certified Ethical Hacker (CEH)

Responsibilities

Maintain accurate and up-to-date reporting on security integration activities for acquired companies, including status of key initiatives, risks, and remediation efforts.
Track and report progress against M&A security roadmaps, milestones, and integration timelines.
Produce regular security status reports and dashboards for leadership, highlighting: Overall integration progress, Open and emerging risks, Compliance gaps and remediation status, Key blockers and dependencies
Maintain centralized tracking for: Security risks and risk ratings, Exceptions, compensating controls, and risk acceptances, Vulnerabilities and remediation SLAs
Assist with preparing executive-ready summaries that translate technical security issues into clear business risk and impact.
Monitor remediation timeline progress and escalate at-risk or overdue items with supporting details to senior team members.
Ensure consistency and accuracy of reporting across multiple acquired entities and integration workstreams.
Support ongoing improvements to reporting templates, metrics, and dashboards to enhance visibility into each acquired entity’s security program status.
Assist with ad-hoc reporting requests related to M&A security activities as needed.
Partner with engineering, IT, compliance, and legal teams to support the integration of security requirements into product and infrastructure lifecycles.
Communicate security requirements, program timelines, and deliverables to both technical and non-technical stakeholders.
Support senior security team members by providing visibility into security risk and technical compliance posture for acquired companies.
Design, build, and lead a team that ensures the security of enterprise data and systems by developing enterprise information security solutions.
Create and update a view of IT assets, related attack surfaces, and threat actors to illustrate the flow of data and associated security threats.
Researches, designs, and develops new enterprise technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners, and vendors.
Serves as a security expert in application development, database design, network, and/or platform (operating system) efforts, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices.
Analyzes business impact and exposure based on emerging security threats, vulnerabilities, and risks and contributes to the development and maintenance of information security strategy and architecture.
Engages with security specialists and other functional area architects to ensure adequate enterprise security solutions are in place to sufficiently mitigate identified risks, and to meet business objectives and regulatory requirements.
Work with Enterprise Architects and other functional area architects and security specialists to ensure adequate security solutions are in place throughout all IT systems and platforms to mitigate identified risks sufficiently and support business objectives.
Serve as an expert in platform, application, storage, network, virtualization, cloud and mobile security best practices.