Security GRC Program Manager, Third Party Risk
Core
Manage third-party security risk assessments, evaluate control effectiveness, and support onboarding decisions for Stripe's external partners.
Role type
Senior IC security governance, risk, and compliance manager (third-party risk)
Builds
Third-party security risk assessment program and risk-acceptance decisions
Domain
Financial services / Information security / Third-party risk management
Required skills
Third-party security risk assessment, Security frameworks (SOC 2, ISO 27001, PCI DSS, NIST, CSA), Risk analysis and remediation, Stakeholder management, Program metrics tracking, Policy development
Preferred skills
Third-party risk management platforms (Aravo, Zip), Enhanced Due Diligence, Program scaling
Technologies
Zip, Aravo
Responsibilities
Manage portfolio of Third Party Security Risk Assessments (TPSRAs), Review security questionnaires and assurance reports, Identify security gaps and remediation requirements, Escalate high-risk findings, Partner with cross-functional teams to resolve issues, Track program health indicators, Contribute to security policies and standards
Seniority
Senior, hands-on IC
