Security Compliance Engineer

At eBay, we're more than a global ecommerce leader — we're changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. We're committed to pushing boundaries and leaving our mark as we reinvent the future of ecommerce for enthusiasts.

Our customers are our compass, authenticity thrives, bold ideas are welcome, and everyone can bring their unique selves to work — every day. We're in this together, sustaining the future of our customers, our company, and our planet.

Join a team of passionate thinkers, innovators, and dreamers — and help us connect people and build communities to create economic opportunity for all.

Looking for a company that inspires passion, courage and creativity, where you can be on the team shaping the future of global commerce? Want to shape how millions of people buy, sell, connect, and share around the world? If you're interested in joining a purpose driven community that is dedicated to crafting an ambitious and inclusive work environment, join eBay – a company you can be proud to be with.

The Global Information Security team is responsible for driving security compliance activities for eBay Payments, Marketplaces, Corporate IT, and adjacent businesses. The Security Compliance Engineer will play a critical role working directly with business leaders to understand security compliance issues, lead technical compliance assessments and mitigation efforts, and develop effective remediation programs and actions to resolve compliance issues.

Key Responsibilities:

• Ability to provide pragmatic guidance to business leaders and customers that effectively balances security compliance risks with the needs of the business

• Contribute to the growing information security and compliance program at eBay, including performing security compliance audits, identifying problems and areas for process improvement

• Work closely with internal business units and relevant departments to assess compliance and where necessary, provide support in remediating non-compliant areas

• Develop a deep understanding of security controls, underlying business processes, concepts, practices, and tools used to promote adoption of applicable security standards

• Advise management on specific security requirements, implementations and the impact on business processes, applications and systems as needed

• Generate periodic reports to teams and senior stakeholders and make practical recommendations to improve security practices

• Research and extract insights from industry standards and trends, apply them to the scope of internal controls and improve security practices and compliance in the company

• Facilitate organizational adoption of new security controls, standards and best practices through thoughtful change management strategies

• Document security/technology control requirements and develop methods to meet new cyber security and compliance needs and requirements as needed

• Drive/contribute to the development and implementation of short term and long term plans to continue the maturation of a compliant environment

• Coordinate compliance and audit activities with other groups

• Develop and provide knowledge, knowledge resources, and guidance regarding control activities

Requirements:

• 7+ years of security and compliance experience. Experience in eCommerce, Payments, or Technology space a plus

• Strong technical understanding of security compliance requirements and solutions, as well as threats and challenges impacting the protection of information across an extended global enterprise

• Possess general knowledge of networking, encryption, authentication,