Security Compliance Engineer
Listed on 2026-07-23
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Key Responsibilities
- Provide pragmatic guidance to business leaders and partners that effectively balances security compliance risks with the needs of the business.
- Contribute to the growing information security and compliance program at eBay, including leading security compliance audits, identifying problems and areas for process improvement.
- Work closely with internal business units and relevant departments to assess compliance and, when necessary, support the remediation of non‑compliant areas.
- Have a deep understanding of security controls, underlying business processes, concepts, practices, and tools used to promote adoption of applicable security standards.
- Advise management on specific security requirements, implementations and the impact on business processes, applications and systems as needed.
- Generate periodic reports to teams and senior partners and make practical recommendations to improve security practices.
- Research and extract insights from industry standards and trends, apply them to the scope of internal controls and improve security practices and compliance in the company.
- Facilitate organizational adoption of new security controls, standards and approaches through thoughtful transition strategies.
- Document security/technology control requirements and develop methods to meet new cyber security and compliance needs and requirements as needed.
- Coordinate compliance and audit activities with other groups.
- 7+ years of security and compliance experience; experience in eCommerce, Payments, or Technology space is a plus.
- Experience with and understanding of PCI DSS, SOC 2, ISO 27001, NIST and/or other industry‑standard control frameworks.
- Experience managing third‑party audits, including working with internal teams to collect evidence used in an audit.
- Strong technical understanding of security compliance requirements and solutions, as well as threats and challenges impacting the protection of information across an extended global enterprise.
- General knowledge of networking, encryption, authentication, payment infrastructure, cloud infrastructure and application security.
- Capable of flexing between high‑level strategic concepts & frameworks to tactical operational implementation.
- Self‑starter with a bias toward action and ability to thrive in a fast‑paced and ambiguous environment.
- Exceptional communication skills including clear and concise writing, an engaging presentation style, and group facilitation.
- Strong teamwork skills with a demonstrated ability to collaborate across teams and roles.
Base pay range: $118,800 - $205,600. Base pay may vary based on location, skills, and experience. Total compensation may include a target bonus and restricted stock units (as applicable) plus a full range of medical, financial, and other benefits, including 401(k) eligibility and various paid time‑off benefits such as PTO and parental leave.
If hired, employees will be in an at‑will position. The company reserves the right to modify base salary and any other discretionary compensation at any time.
Remote roles are not eligible for U.S. visa sponsorship.
Equal Opportunity EmployereBay is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, veteran status, disability, or other legally protected status. If you have a need that requires accommodation, please contact us at We will make every effort to respond to your request for accommodation as soon as possible.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).