Cybersecurity Strategy & Policy Analyst

$52,800 - $136,510/Yr

PayPal - New York, NY

Full-time - Mid Level

Hybrid - New York, NY

Credit Intermediation and Related Activities

About the position

The Cybersecurity Strategy & Policy Analyst at PayPal plays a crucial role in developing internal policies, organizational strategies, and external messaging related to cybersecurity and technology. This position is part of the Cybersecurity Governance, Risk & Compliance (GRC) organization and involves collaboration with various teams to enhance cybersecurity practices across PayPal's brands, including Venmo and Xoom. The analyst will leverage their knowledge of technology and risk management to drive impactful changes and ensure compliance with industry standards.

Responsibilities

• Lead independent and cross-functional projects to evaluate high-priority security and technology topics, issues, and risks.
• Work with key partners to propose, assess, frame, and advocate for changes to PayPal's technology policies and strategy.
• Identify and document key decision points, cost-benefit analysis, business trade-offs, technical and security risks, and other relevant factors for decision-makers.
• Establish trusted working relationships with key partners across various teams.
• Foster alignment with key partners on emerging policy topics, proposed changes, and implementation plans.
• Prepare working and executive-level reports, memos, and presentations to communicate complex concepts, risks, and recommendations.

Requirements

• Knowledge of current and emerging information technologies (e.g., AI / ML); cybersecurity threats and vulnerabilities; risk management processes and practices.
• Strong work ethic with proven ability to learn quickly, prioritize work, and manage complex deliverables to completion under established deadlines.
• Exceptional verbal and written communication and analysis skills, including experience developing high-quality written analysis, strategy, or policy documents.
• Master's Degree in a relevant discipline, such as cybersecurity, business, public policy, economics, statistics, risk management, or computer science; outstanding Bachelor's Degree candidates will be considered.
• 2+ years total experience in technology or security governance, policy, risk management, and/or compliance roles.

Nice-to-haves

• Familiarity with advanced functionality in Microsoft Word, Excel, and PowerPoint, as well as concept and process mapping tools (e.g., Miro, Mural, etc.).
• Prior involvement in analysis, interpretation, and communication of legal or regulatory technology policy requirements.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Life insurance
• Flexible work environment
• Employee shares options