Security Policy Manager

We are looking for an experienced staff member to support our global team. This role will work with partners in policy, integrity, legal, and investigative teams to identify and resolve key gaps in our policies and technical controls that are exploited in pursuit of frauds and scams, inauthentic behavior, and other adversarial, abusive actions. This role will involve analyzing regulatory requirements and adversarial behavior, and coordinating with local and global policy teams to support engagements with regulators, researchers, and industry partners to share information and build partnerships in support of our work.

Security Policy Manager Responsibilities

1. Work with policy, legal, investigative, and product teams to analyze emerging policy, active regulations, litigation, and public concerns related to adversarial behavior. Partner with global product organizations to support the design of systems to control and mitigate those risks - including identity verification systems.
2. Review adversarial behaviors and trends of abuse across APAC markets and user communities, and help investigators, policy teams, and product organizations better understand the tactics used in a variety of harms and abuses, including scams, frauds, inauthentic behavior, spam, etc.
3. Partner with policy, marketing, communications, legal, and partnerships teams as a security subject matter expert, working to respond to regulatory inquiries, advance our strategic partnerships with governments, and improve our relationships with regulators, industry partners, researchers, and users.
4. Provide analysis of existing controls’ effectiveness and work with internal partners to design and evaluate new metrics for understanding the risks facing our users and systems.

Minimum Qualifications

1. Master’s degree in Computer Science, a law degree, or equivalent experience.
2. 8+ years of relevant cybersecurity and policy experience.
3. Experience in information security at technology companies and/or in government.
4. Demonstrated experience working between technical and non-technical teams.
5. Experience communicating complex technical/security issues to non-technical audiences.
6. Understanding of the global cybersecurity standards and regulatory environment.
7. Understanding of current threats and trends in cybersecurity and in cybersecurity legislation.
8. Experience working in a dynamic environment and influence outcomes.
9. Experience operating independently and in ambiguity.

Preferred Qualifications

1. Background in security technologies, standards, and regulations, to include those related to payments services and/or identity verification.
2. Experience in identification, assessment, and disruption of malicious actors.
3. Advanced degree or equivalent experience in information security or cybersecurity.
4. Experience operating in developing nations.