Program Manager, Stripe

• You are a subject matter expert in information security frameworks, practices, policies, standards and procedures (e.g. NIST CSF, PCI DSS, ISO 27001/2 or equivalent)
• You understand how to balance business needs with security requirements and focus on business outcomes
• You have 2+ years engaging with customers and business partners, engineering, security, compliance, and legal teams as part of the go-to-market sales cycle
• You have experience driving small to mid-scale projects and programs from start to finish within highly complex operating environments
• You have strong written and verbal communication skills, building strong relationships at all levels of the organization from senior leaders to project teams
• You possess a strong background in information security operations, risks and controls identification, and assessments
• You are a critical thinker, passionate, self-driven, and detail-oriented

Desirable

• The goal of the Security Business Enablement team at Stripe is to build trust with our current and prospective customers and partners
• We support Sales, Marketing, Legal, Privacy, and Security teams, directly engaging with our customers and partners to communicate and represent the security activities performed by hundreds of employees and thousands of processes across our suite of products and services
• We build and operate the tools and platforms necessary to scale our resources across millions of users
• The Security Business Enablement Program Manager position will be part of Stripe’s Office of the CISO pillar
• You will represent all of Stripe directly to our customers and partners, facilitate conversations with Legal and Security teams, and identify opportunities to enhance our coverage and scalability with tooling and automation
• Function as an information security subject matter expert and lead cross-functional teams to engage with customers and partners to build trust and grow our business
• Serve as the main point of contact for all go-to-market related requests
• Operate autonomously leading large-scale efforts to implement and operating tooling and automation across multiple teams and functions, with stakeholders in different disciplines and time zones
• Identify and evaluate information security control gaps and oversee remediation efforts, in partnership with controls owners
• Develop information security policies and standards based on cybersecurity framework guidelines
• Develop, define, and report on the team’s program health and success metrics to provide insights to management to help drive strategic direction