Cyber Resilience & ICT Risk Engineering Senior Manager

The Company

PayPal has been revolutionizing commerce globally for more than 25 years. Creating innovative experiences that make moving money, selling, and shopping simple, personalized, and secure, PayPal empowers consumers and businesses in approximately 200 markets to join and thrive in the global economy.

We operate a global, two-sided network at scale that connects hundreds of millions of merchants and consumers. We help merchants and consumers connect, transact, and complete payments, whether they are online or in person. PayPal is more than a connection to third-party payment networks. We provide proprietary payment solutions accepted by merchants that enable the completion of payments on our platform on behalf of our customers.

We offer our customers the flexibility to use their accounts to purchase and receive payments for goods and services, as well as the ability to transfer and withdraw funds. We enable consumers to exchange funds more safely with merchants using a variety of funding sources, which may include a bank account, a PayPal or Venmo account balance, PayPal and Venmo branded credit products, a credit card, a debit card, certain cryptocurrencies, or other stored value products such as gift cards, and eligible credit card rewards.  Our PayPal, Venmo, and Xoom products also make it safer and simpler for friends and family to transfer funds to each other. We offer merchants an end-to-end payments solution that provides authorization and settlement capabilities, as well as instant access to funds and payouts. We also help merchants connect with their customers, process exchanges and returns, and manage risk. We enable consumers to engage in cross-border shopping and merchants to extend their global reach while reducing the complexity and friction involved in enabling cross-border trade.

Our beliefs are the foundation for how we conduct business every day.  We live each day guided by our core values of Inclusion, Innovation, Collaboration, and Wellness. Together, our values ensure that we work together as one global team with our customers at the center of everything we do – and they push us to ensure we take care of ourselves, each other, and our communities.

Job Summary

As PayPal continues its mission to revolutionize commerce, we’re looking for a Cyber Reliability & Resilience Manager to join our PCIS / ICR team in our Luxembourg office. This is a senior governance, risk, and controls role within the First Line of Defense, responsible for ensuring PayPal Europe’s compliance with the EU Digital Operational Resilience Act (DORA) and other relevant European regulatory frameworks.

The role serves as a strategic bridge between the local obligations of a regulated entity and enterprise-wide technology and security operations. It ensures that digital operational resilience, cyber risk management, and regulatory compliance are effectively embedded into business strategy, change initiatives, and day-to-day operations.

If this sparks your interest, keep reading — the best is yet to come!

Job Description

Essential Responsibilities

• Recognized as a security governance, risk, and compliance expert, independently addressing the most complex security risks and providing strategic direction on risk mitigation and governance practices across the security domain.

• Define methods and procedures for new or special assignments, collaborating with cross-functional teams to drive security risk and governance initiatives that align with business needs and objectives.

• Lead complex, high-impact security governance and risk management initiatives, leveraging a deep understanding of business trends and security challenges to develop innovative risk mitigation strategies and solutions.

• Possess a keen awareness of the broader impact of decisions, with initiatives driving enterprise-wide improvements in risk management and security governance, enhancing overall security practices and operational efficiency.

• Lead a security risk and governance team; set clear priorities and define actionable plans, ensuring alignment with organizational goals.

• Guide team members through complex challenges, fostering their growth and development while maintaining a focus on high-impact results.

Minimum Qualifications

• 8+ years relevant experience and a Bachelor’s degree OR Any equivalent combination of education and experience.

Additional Responsibilities & Preferred Qualifications

Key Responsibilities

Operational Resilience & Cyber Security

• Drive the implementation and continuous improvement of PayPal Europe’s ICT operational resilience capabilities under DORA and related European regulatory frameworks.

• Partner directly with infrastructure, cloud, security engineering, SRE, and product teams to strengthen resilience of critical ICT services and business processes.

• Lead resilience testing activities including disaster recovery exercises, cyber simulations, failover validation, tabletop exercises, and scenario-based operational testing.

• Support the secure design and resilience review of technology platforms, cloud environments, outsourcing arrangements, and major transformation initiatives.

• Contribute to the identification, prioritization, and remediation of technology and cyber security risks impacting the regulated entity.

ICT Risk & Secure Change Management

• Act as First Line ICT risk lead for major technology changes, cloud migrations, new product launches, and operational transformation programs.

• Perform practical ICT and cyber risk assessments across infrastructure, applications, third-party services, and operational processes.

• Ensure security, resilience, and regulatory requirements are integrated into technology delivery lifecycles and operational processes.

• Work closely with engineering and product stakeholders to ensure remediation plans are technically realistic, measurable, and effectively implemented.

• Assess operational impacts of material ICT changes under DORA, PSD2/PSD3, GDPR, and ECB expectations.

Incident Response & Regulatory Engagement

• Serve as a senior First Line subject matter expert during cyber security incidents and operational disruption events.

• Coordinate ICT incident assessment, regulatory notification inputs, root cause analysis, and remediation tracking.

• Support engagement with European regulators including CSSF, CNPD, ECB, and external auditors during inspections, reviews, and incident-related communications.

• Contribute to post-incident reviews and resilience improvement initiatives following operational or cyber events.

Control Environment & Technical Risk Reduction

• Support the implementation and operational effectiveness of ICT security and resilience controls across the regulated entity.

• Partner with enterprise security and engineering teams to improve detection, recovery, resilience, and operational monitoring capabilities.

• Track remediation of resilience and cyber control gaps and support risk-based prioritization activities.

• Contribute to operational resilience metrics, KRIs, and executive reporting focused on measurable risk reduction outcomes.

Educatio n

• Bachelor’s or Master’s degree in Cyber Security, Computer Science, Information Technology, Software Engineering, Information Systems, or a related technical discipline.

• Strong preference for candidates with an engineering or technical operations background combined with experience in cyber security, operational resilience, or technology risk within regulated environments.

• Professional certifications are highly desirable, particularly those demonstrating practical cyber security, resilience, or technology risk expertise, such as:

o   CISSP

o   CISM

o   CISA

o   CRISC

o   ISO 27001 Lead Implementer / Lead Auditor

o   ISO 22301 Business Continuity certifications

o   Cloud security certifications (AWS Security, Azu