Security Governance, Risk, and Compliance Program Manager, Stripe
$161.3-241.9k
A financial infrastructure platform for businesses
Be an early applicant
A financial infrastructure platform for businesses
1001+ employees
Be an early applicant
$161.3-241.9k
1001+ employees
Company mission
To increase the GDP of the internet
Role
Who you are
- You are a subject matter expert in information security frameworks, practices, policies, standards and procedures (e.g. NIST CSF, SOC 2, PCI DSS, ISO 27001/2 or equivalent)
- 6+ years of experience in Security Governance, Risk, and Compliance (GRC) or Technology Compliance roles with a robust understanding of audit processes
- Exposure to global regulatory requirements (e.g., DORA, FFIEC, EBA, NYDFS) and their integration into compliance programs
- Proven track record in leading GRC initiatives and managing large-scale security programs
- Experience in conducting security audits and ensuring compliance with regulations
- Strong project management skills with proficiency in coordinating security assessments and managing multiple stakeholder engagements
- Excellent communication skills, capable of building strong relationships at all levels, from executive discussions to technical team collaboration
What the job involves
- We are seeking an experienced Security Governance, Risk, and Compliance (GRC) Program Manager to join our team. In this role, you will lead the development and implementation of our security GRC initiatives, ensuring robust governance, risk management, and compliance processes are in place to protect company assets and data
- As a key player in our security team, you will work collaboratively to enhance our security posture and drive strategic initiatives in alignment with industry best practices and regulatory requirements. The ideal candidate will be adaptable and can find structure in an evolving and maturing organization
- In this role, you will act as a proxy between external entities like regulators and auditors, and our internal security teams, ensuring consistency in compliance responses and helping maintain a lean and effective compliance program
- Act as an information security subject matter expert during cross-functional audit engagements
- Participate and support audit walkthrough meetings on behalf of the Security team
- Serve as an internal liaison (proxy) between Technology GRC and the Security organization to ensure audits are managed effectively
- Perform various security risk & control assessments against common security frameworks to ensure compliance with Stripe’s Information Security Policy & Standards,
- Create and maintain a central repository of audit evidence artifacts needed for compliance with SOC 2, PCI DSS, SOX, and other global regulatory standards
- Facilitate security support for Stripe’s legal entities with regulatory compliance obligations
- Collaborate with and support conversations with key stakeholders to track and report on control remediation efforts
- Maintain strong relationships across executive teams and technical collaborators
- Support acquisitions with security GRC related programs
- Support the overall GRC team program initiatives, including policy writing, security awareness training, and third-party security risk assessments
Our take
Stripe, nowadays a FinTech giant, spent the first few years since its founding building up its payments business, which primarily consisted of providing an API to eCommerce businesses so that they could easily integrate a payments option in their apps or websites, where before there was none.
More recently, Stripe has started to accelerate its growth with a significantly larger range of financial services including cash advances and credit cards. They also plan to build incorporation services, fraud protection, and more, diversifying its revenue away from payments and differentiating itself from its competitors.
To further expand its position, the company is looking to triple its presence in Ireland, and extend its services to countries with vast customer potential, including Brazil and India. Its latest venture, coming atop significant new funds, is to partner with OpenAI, the company behind ChatGPT - a win-win collaboration that will monetize OpenAI’s flagship products and at the same time enhance Stripe with GPT-4, as it moves forwards with intentions to "build the payments foundation for tomorrow's AI economy."
Freddie
Company Specialist at Welcome to the Jungle
Insights
-5% employee growth in 12 months
Company
Funding (last 2 of 13 rounds)
Mar 2023
$6.5bn
GROWTH EQUITY VC
Mar 2021
$600m
SERIES H
Total funding: $8.7bn
Company benefits
- Unlimited paid time off policy
- Work from home opportunities
- Comprehensive mental, physical and medical health plans
- Fertility benefits and parental leave
Company HQ
SoMa, San Francisco, CA
Leadership
Patrick Collison
(Content Strategist)Studied maths at MIT before founding Stripe. Also on the board of the Long Now Foundation.
John Collison
(President)Studied at Harvard but dropped out to found Stripe.
Share this job
View 205 more jobs at Stripe