We are seeking a risk management expert to lead the implementation of PayPal’s Enterprise Risk Management (ERM) framework in the Global Core Payments business unit. The ERM framework allows PayPal to effectively manage business risk, adhere to required global regulatory requirements and maximize shareholder return.
Watch: Career Advice The person we are seeking will be a superior relationship builder who can interact successfully at all levels of the company, from individual business unit managers to executive management. He or she should have a proven ability to influence and drive key decisions, and thrive in a matrix organization environment.
This role requires strong partnership across the entire organization—including lines of business and support areas (business owners, risk owners, etc.) to drive clear and transparent risk assessments and reporting.
The Manager – GCP Business Risk will:
• Facilitate the risk governance processes to ensure risks are properly identified, assessed and classified in accordance with defined ERM program standards and properly mitigated within the defined risk tolerance as set forth by the enterprise risk management committee (ERMC)
• Help instill governance into PayPal’s operating rhythms (budgeting, SPP, operations review)
• Work to develop an effective risk management culture, discipline and maturity model throughout the Global Core Payments business unit
Job Description:
The Manager – GCP Business Risk is responsible for deploying an Enterprise Risk Management Program that meets the below expectations.
Responsible for identifying, managing, and monitoring the GCP business unit risk environment.
Deploy the standard ERM framework to identify, assess, mitigate, monitor, test and report on key risks it is facing
At least annually, perform a risk self-assessment (with ERM Partner) to ensure risks are understood
Perform risk assessment of business, country, and products
Develop appropriate control environment to manage risks within the agreed / set “risk appetite and tolerances.
Monitor and report on status of risk and control environment.
Partner with the Second Lines of Defense (SLOD) to understand expectations for managing cross functional risks; deploy processes to comply with SLOD policy expectations which may require First Line of Defense (FLOD) implementation of required controls and on-going monitoring and reporting to the SLOD owner.
Regional FLODs to have oversight of execution of regional risk and/or control requirements which may be managed and executed by the SLOD.
Accountable and responsible for controlling the acceptable amount of residual risk by ensuring the necessary controls are implemented and executed upon
Populate risk and issue database with known risks, risk rating, and risk owner
Responsible for ensuring that the SLOD is informed of any issues and risks that relate to their functional area
Address all IA, SOX and regulatory findings that arise in a timely manner.
Ensure that leadership and SLOD is aware of any issues and risks before items are escalated.
Work with ERM and other functional groups to put in place comprehensive daily, weekly and monthly reporting to monitor risks.
Develop and manage the Risk Reporting content leveraged by ERM to convey the business environment as expressed in risk themes to the Enterprise Risk Management Committee of the Board of Directors and to senior management.
Provide quarterly risk update/attestation to PayPal ERMC on status of risk and control environment.
Collaborate with key internal partners (e. g. Compliance, Finance) to achieve business objectives.
Develop, monitor, and enforce written policies, standards and standard operating procedures.
Understand, adhere to and enforce all corporate policies, standards and standard operating procedures.
Support organization change management (including structure, strategies and other programs) to facilitate transition to future state.
Manage the day to day operations of risk management within the functional area.
Support a risk-aware culture across the organization.
Stay abreast of evolving practices in risk management.
Basic Qualifications:
MS/MBA degree or equivalent
4+ years related experience (Subject Matter Expertise – ie. Technology Experience, Compliance) or 7+ years related experience if without MS/MBA degree.
Send To A Friend