Senior Cybersecurity and Risk Analyst at PayPal

Chicago, Illinois, United States -

Full Time

Start Date

Immediate

Expiry Date

23 Jan, 26

Salary

0.0

Posted On

25 Oct, 25

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, Risk Management, Governance Frameworks, Analytical Skills, Communication Skills, Stakeholder Collaboration, Technical Risk Assessment, Decision-Making, Compliance, Legal Interpretation, AI/ML Knowledge, NIST, ISO, CISM, CISA, CISSP

Industry

Software Development

Description

Independently assess and apply security governance frameworks and risk management practices to strengthen organizational security posture, while beginning to understand and align solutions with business objectives. Partner with peers and internal teams to drive security risk and governance initiatives, contribute to cross-functional projects, and at times co-lead efforts to strengthen security posture. Evaluate and mitigate security risks by implementing established governance frameworks and exploring alternative risk management strategies to address complex security challenges Influence the quality, efficiency, and effectiveness of the team through informed decision-making, with a potential impact on other teams. Collaborate with key partners to gather and incorporate feedback, driving continuous improvements in security governance processes and risk management practices In your day to day role you will contribute to a culture of effective risk management, accountability, and demonstration of risk awareness across the organization. Support issue remediation efforts while collaborating with IT and Business lines. Translate technical risks into business terms to promote effective communication and help identify, manage, and escalate risk. Document key decision points, cost-benefit analysis, business trade-offs, technical and security risks, and other relevant factors for decision-makers related to technology and cybersecurity. Develop working relationships with partners across engineering, architecture, risk management, compliance, legal, communications, government relations, and oversight teams. Support alignment with key partners on risk response proposals and implementation plans based on industry best practices, regulatory requirements, and organizational risk tolerance. Prepare reports, memos, and presentations to communicate technical concepts, risks, and analysis in a clear and concise manner. 3+ years relevant experience and a Bachelor's degree OR Any equivalent combination of education and experience. Knowledge of current information technologies (e.g., AI / ML); cybersecurity threats and vulnerabilities; risk management processes and practices; industry standard control frameworks and best practices (e.g., NIST, ISO); and cybersecurity and privacy regulations. Strong work ethic with proven ability to learn quickly, prioritize work, and manage deliverables to completion under established deadlines. Ability to research and understand complex technical topics and identify key considerations for relevant audiences. Strong consultative, analytical, and influencing skills, including business acumen and stakeholder collaboration, as well as comfort working in a dynamic, global, and matrixed working environment. Strong verbal and written communication and analysis skills, including experience developing quality written analysis and documentation. Experience with analysis and interpretation of legal or regulatory technology policy requirements. Ability to deliver written work product and verbal presentations to varied audiences (e.g., management, engineers, business stakeholders, etc.) Professional and ethical integrity, ideally demonstrated through experience with projects of a sensitive or confidential nature. Ability to approach problems from a statistical or quantitative perspective and draw meaningful conclusions, as well as evaluate models and analysis for accuracy. Bachelor's Degree in a relevant discipline, such as cybersecurity, business, public policy, economics, statistics, risk management, or computer science; Master's Degree preferred. Certifications preferred: CISM, CISA, CISSP, CGEIT, AAIA

Responsibilities

Independently assess and apply security governance frameworks and risk management practices to strengthen organizational security posture. Collaborate with internal teams to drive security risk and governance initiatives and support issue remediation efforts.