Security & Compliance Program Manager, TCGplayer

• Bachelor's Degree in related field (4 years BS/BA or equivalent)
• 10+ years of proven, successful Technical Program/Project management work experience and methodology implementation
• Hands on experience building and driving InfoSec and SOX-specific programs to completion, with demonstrated business value
• Comfortable working in a matrix environment, co-authoring priorities and goal alongside Engineering Leadership and delegating without direct supervision or authority
• Experience with developing methodologies and working within Agile Frameworks, Scrum/Kanban. Hands-on experience with Jira and Confluence is a must
• A practical understanding of technology from a security perspective. Ability to define and articulate rationale and trade offs in business risk/value terms

Desirable

• This role will work in coordination with eBay, developing the overall program framework, scoping risk assessment, controls rationalization & optimization, design and execution of tests and measuring operating effectiveness, and coordination of remediation, retesting and reporting
• Additionally, you will liaise and work closely with the internal and external Security Engineering, Software Dev teams, TechOps, IT and auditors to understand, intake, align, resource and report on all ongoing InfoSec & SOX activities
• The Senior Security Program Manager will have a broad exposure across TCGplayer’s Engineering & Business domains
• Responsible for all Program & Project Management aspects of the company’s Info/Security Engineering & SOX program, including developing the framework to manage, plan, organize, implement and deliver program activities
• Lead the further development and improvements across the SOX and audit programs and lead operational audits, organize and submit evidence, and handle response mechanisms along with the Director of Security Engineering
• Gather and analyze data as necessary to accomplish audit objectives in a timely manner
• Develop formal reports, clearly expressing approach, objectives and conclusions of areas audited and recommendations to address risks and exposures
• Coordinating multi-disciplinary project team activities (matrix model) to deliver technical projects of varying size and complexity, including: Definition/confirmation of scope, Implementation approach, Budget and actuals tracking, Resource planning, Milestone tracking, Management of project risks, issues, and dependencies (RAID log)