Payment Security & Compliance Program Manager, Coupa
$83-108k
Office located in Boca Raton, Fl
Business spending management platform
Open for applications
Business spending management platform
1001+ employees
Open for applications
$83-108k
Office located in Boca Raton, Fl
1001+ employees
Company mission
To provide a clear idea of business value for clients.
Role
Who you are
- This is a hands-on and highly technical role requiring a deep understanding of cloud infrastructure, logging and monitoring, IAM, segmentation, encryption, CI/CD, and secure operations
- 5–8+ years of experience in security compliance, cloud security, technical audit, or payment security programs
- Deep expertise in PCI DSS (ideally PCI DSS v4.0) with hands-on experience supporting or preparing for QSA-led assessments; SWIFT CSCF or other high-security financial frameworks strongly preferred
- Strong technical understanding of cloud platforms (AWS/Azure), IAM, encryption, logging/monitoring, network segmentation, and CI/CD pipelines
- Proven success collaborating with engineering, cloud operations, SRE, and security engineering teams on control implementation and validation
- Excellent documentation, governance, and process discipline, with the ability to drive multi-team remediation and maintain ongoing compliance rigor
- Experience with GRC platforms such as TrustCloud, Archer, ServiceNow, or comparable tooling
What the job involves
- The Impact of a Payment Security & Compliance Program Manager at Coupa:
- We are seeking a highly technical and detail-oriented Payment Security & Compliance Program Manager to lead compliance and governance across our payment-related frameworks, including PCI DSS, SWIFT CSCF, and other payment assurance obligations
- This role owns the scoping, readiness, documentation, control implementation tracking, and continuous compliance posture of all environments handling payment data and SWIFT-connected systems
- As the primary owner of Coupa’s payment security compliance programs, you will partner closely with Engineering, Cloud Operations, IAM, Product Security, and GRC teams to ensure technical controls are implemented properly, evidence is audit-ready, and all payment environments maintain a continuously mature and secure posture
- You'll own and manage end-to-end PCI DSS and SWIFT CSCF programs, including scope maintenance, control applicability, compensating controls, authoritative documentation, and annual assessment readiness
- Operate continuous compliance and evidence management, maintaining a validated, audit-ready evidence library in our GRC Platform with structured refresh cadences for all PCI/SWIFT controls
- Provide scoping, segmentation, and architecture governance by partnering with Engineering and Cloud Ops to review CDE boundaries, trust zones, architectural changes, and enforce required technical controls
- Monitor and validate technical security controls across IAM, encryption, segmentation, logging/monitoring, vulnerability management, and incident response; maintain control monitoring logs and drive hardening improvements
- Lead internal-facing audit support and remediation governance, partnering with QSA/CSCF assessors, preparing audit populations, managing walkthroughs, and driving remediation tracking, prioritization, and validated closure
- Maintain system-of-record documentation and emerging standards readiness, ensuring PCI/SWIFT artifacts meet regulatory expectations while monitoring framework updates, leading impact analyses, and planning for new requirements
Our take
In 2006, Noah Eisner co-founded Coupa with Ravi Thakur, two fintech start-up specialists, as a provider of business spending management (BSM) services. Coupa has grown into its niche with a comprehensive platform that enables companies to gain greater control over their spending, supply networks, chain optimisation, liquidity management and payment solutions.
Coupa has been recognised as a leading brand in third-party risk management (TPRM). Using artificial intelligence software, its TPRM software takes data from hundreds of sources and generates risk flags across the entire platform, informing the user’s processing decisions.
TPRM integrates into Coupa’s business spending management systems to provide one comprehensive platform, a feat that gives it a definitive edge when it comes to secure management of company funds. Acquired in early 2023 by Thoma Bravo, Coupa is a company to watch, as progress in AI software could open opportunities for greater software automation on its platform.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-3% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Jun 2015
$80m
SERIES G
Mar 2014
$40m
SERIES F
Total funding: $169m
Company benefits
- Employee stock purchase program
- Health benefits for employees and their families
- Retirement and savings plans
- Flexible work environment
Company HQ
Town Center, Foster City, CA
Leadership
Leagh Turner
(CEO & Board Of Directors)Previously on the Board of Directors at Plan International Canada, was the Co-CEO of Ceridian and was COO at SAP.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 5 more jobs at Coupa