Program Manager, Security GRC
Core
Serve as the primary interface between Stripe's Security organization and external auditors, regulators, and compliance stakeholders to ensure consistent compliance across a global regulatory landscape.
Role type
Senior IC Security GRC Program Manager
Builds
A lean and effective compliance program that enables strategic security decisions and risk measurement.
Domain
Financial technology / Global regulatory compliance
Deliverable
Dashboards & analysis
Required skills
Security GRC frameworks expertise, audit management, global regulatory integration, program management, stakeholder coordination, control remediation tracking
Preferred skills
Policy writing, security awareness training design, third-party risk assessment
Technologies
NIST CSF, SOC 2, PCI DSS, ISO 27001/2, DORA, FFIEC, EBA, NYDFS, ISO 2700x, PCI DSS, SOX, NIST, COBIT
Responsibilities
Represent the Security team in walkthrough meetings with auditors and regulators; Create and maintain a central repository of audit evidence artifacts; Perform security risk and control assessments against common frameworks; Support control owners with guidance on security control design and redesign; Facilitate security compliance support for Stripe's legal entities with regulatory obligations; Support broader GRC team program initiatives including policy writing and third-party security risk assessments
Seniority
Senior, hands-on IC
