International Tech Risk Oversight

At PayPal (NASDAQ: PYPL), we believe that every person has the right to participate fully in the global economy. Our mission is to democratize financial services to ensure that everyone, regardless of background or economic standing, has access to affordable, convenient, and secure products and services to take control of their financial lives.

Job Description Summary: What you need to know about the role Tech Risk Oversight lead helps oversee the technology risks for a full spectrum of information technology services for PayPal in Asia-Pacific and LATAM. Based in Singapore and part of a cross functional team, this roles focus is on leading the risk management and oversight of design, architecture, and execution of technology infrastructure and initiatives in the regions. In partnership with risk management and compliance colleagues this individual will also play a key role in compliance, regulatory reporting and regional governance processes. Meet our Team This role is part of Technology and Infosec Oversight org, reporting to the Head of TISO for Asia-Pacific and Americas markets. The team comprises of Heads of Tech and Security Oversight officers for key markets for PayPal like China, Australia, Japan, South East Asia, India, Hong Kong etc. The individual will work closely in this role with Office of the CISO as well as the CEO of the International HQ based in Singapore. Key stakeholders for the role will include Risk management, affiliate servicers (outsourcing), Market compliance, Enterprise cybersecurity and CIO office.

**Job Description**:
**Your way to **impact**

The Tech Risk Oversight lead will provide the leadership for all aspects of information technology oversight that support PayPal's business objectives and requirements in Asia-Pacific and LATAM. A key objective is to establish oneself as a key member of PayPal APAC-CISO’s leadership team, while functioning as an effective member of the Technology organization. In particular, the incumbent must work with senior leadership from different parts of the business including sales, risk, compliance, legal, outsourcing, human resources, facilities, and others.

**Your day to Day**
- Develop and direct the organizations’s overall technology risk management strategy and ensure it is aligned with business objectives including but not limited to cloud, M&A, emerging tech, etc.
- Support compliance of the IT function with regulatory requirements,
- Work closely with department heads and managers to identify, assess and manage risk management strategies within organisations’s appetite,
- Perform periodic reviews of the IT function through regular testing and monitoring,
- Provide the Enterprise Risk Management team with relevant input and documentation as part of the ERM periodic risk reports,
- Support the audits of regulated entities on technology related matters,
- Liaise with global colleagues for the evaluation, deployment, and management of all technology risks for PayPal and all its subsidiaries
- Technology watch on trends and issues within the Tech and Fintech sector,
- Review compliance with the IT policy,
- Escalate issues to the risk committee for resolution or mitigation of IT issues.

In addition, the duties of the role require ensuring:

- Manage adherence to disaster recovery best practices and local regulations regarding storage of customer data,
- Appropriate systems and network infrastructure is in place to support current and projected PayPal business,
- High availability of critical systems are sustained,
- Operational integrity is maintained, including processes to support proper hardware installation, server builds and systems monitoring,
- Appropriate service management procedures are in place and followed,
- Compliance with regards to data privacy, data retention and audit trails requirements,
- Disaster recovery plans are in place and adequate for the requirements of the organization, including obtaining copies of validation/testing results that ensure DRP configuration works in practice as expected.
- Appropriate IT change and configuration management are in place between the service providers and the IHQ prior to their connection to production networks
- Proper tools and processes are in place to ensure confidentiality of data as required by various applicable regulations

**What you need to brin**g**
- Bachelor of Science in computer Science, Electrical Engineering, or equivalent,
- A minimum of 10+ years of technology experience, with specific focus on IT Management (or related concepts, such as regulatory compliance, IT risk management), in companies with a significant online business, multiple business units, and multiple products,
- Proficiency in written and spoken English, Mandarin language skills will be considered as an asset,
- Experience with regulatory requirements in the area of information technology in Financial sector in APAC and/or LATAM.
- Experience in IT disaster recovery planning (DRP) and in busin