ICT Risk & Resilience Manager

About the role

PayPal is seeking an ICT Risk & Resilience Manager for its Luxembourg office to support compliance with the EU Digital Operational Resilience Act (DORA) and other European regulatory frameworks. This senior position sits in the First Line of Defense, bridging local regulatory obligations with enterprise‑wide technology and security operations.

Key responsibilities

• Design, test and maintain business continuity, disaster recovery and cyber‑resilience controls, including scenario testing and remediation tracking.
• Lead DORA compliance activities such as technology risk management, operational resilience testing and reporting to senior governance forums.
• Oversee material change management, ensuring new product launches and major technology changes undergo security risk assessment and regulatory impact analysis.
• Coordinate ICT control testing, validate evidence across business lines and drive remediation of control deficiencies.
• Act as First Line subject‑matter expert for ICT and cyber incident management, handling severity assessment, escalation and post‑incident review in line with DORA, GDPR and other supervisory requirements.
• Partner with cross‑functional stakeholders to embed digital operational resilience and cyber risk management into business strategy and day‑to‑day operations.

Required profile

• Minimum 5 + years of relevant experience in ICT risk, cyber security or regulatory compliance.
• Bachelor’s degree or equivalent combination of education and experience.

Required skills

• Risk assessment and mitigation in ICT environments.
• Incident management and regulatory reporting (DORA, GDPR, PSD2).