What you'll do

This role is part of the Office of the CISO pillar at Stripe. You'll represent all of Stripe directly to our customers and partners, facilitate conversations with Legal and Security teams, and identify opportunities to enhance our coverage and scalability with tooling and automation.
Responsibilities
• Function as an information security subject matter expert and lead cross-functional teams to engage with customers and partners to build trust and grow our business
• Serve as the main point of contact for all go-to-market-related requests
• Operate autonomously, leading large-scale efforts to implement and operate tooling and automation across multiple teams and functions, with stakeholders in different disciplines and time zones
• Identify and evaluate information security control gaps and oversee remediation efforts, in partnership with control owners
• Develop information security policies and standards based on cybersecurity framework guidelines
• Develop, define, and report on the team's program health and success metrics to provide insights to management to help drive strategic direction
Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
• You are a subject matter expert in information security frameworks, practices, policies, standards, and procedures (e.g., NIST CSF, PCI DSS, ISO 27001, SOC 2, or equivalent)
• You understand how to balance business needs with security requirements and focus on business outcomes
• You have 5+ years engaging with customer and partner business, engineering, security, compliance, and legal teams as part of the go-to-market sales cycle
• You have experience driving large-scale projects and programs from start to finish within highly complex operating environments
• You have strong written and verbal communication skills, building strong relationships at all levels of the organization from executives to project teams
• You communicate clear and succinct security compliance controls and requirements with external Stripe stakeholders, including security counterparties at global financial institutions
• You possess a strong background in information security operations, risks and controls identification, and assessment
• You are a critical thinker, passionate, self-driven, and detail-oriented
Preferred qualifications
• You've developed reports on program performance via dashboards and OKRs, and performed detailed data analysis
• You have experience working with engineers for the automation of security controls and generation of evidence
• You've utilized AI to automate complex information-gathering tasks and build interfaces for non-technical users