Stripe

Security GRC Analyst/Program Manager, Bridge

Stripe • $135K — $160K *
Enterprise Technology
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • 8+ years of experience in Security GRC, preferably in startups
  • Startup mindset: scrappy, pragmatic, fast problem solver
  • Proficient with NIST CSF, OCC's Cybersecurity programs, or similar frameworks
  • Experience with global regulatory audits in Security domains
  • Ability to thrive in ambiguity and prioritize effectively
  • Capability to balance security rigor with operational speed
  • Strong execution skills in crafting roadmaps and driving projects

Responsibilities

  • Identify and address critical security risks promptly
  • Adopt and tailor Stripe's security programs and controls
  • Reinforce best practices in secure development and infrastructure
  • Ensure compliance as the organization scales into regulated markets
  • Collaborate with cross-functional teams to enhance security without sacrificing speed

Benefits

  • Opportunity to design and scale security programs from the ground up
  • Access to mature security practices and tooling from a leading organization
  • Work in a fast-paced startup environment
  • Engaging in innovative aspects of crypto and stablecoins
  • Collaborative team culture across engineering and compliance
Full Job Description
About the Role

We're hiring a Security Analyst / Program Manager to build and scale Bridge's security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.
Responsibilities
  • Identify and tackle Bridge's most important security risks quickly and pragmatically.
  • Adopt Stripe's programs, controls and processes where it makes sense, and find custom approaches where it doesn't.
  • Reinforce engineering best practices around secure development and infrastructure.
  • Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.
  • Collaborate cross-functionally with engineering, product, and Stripe's security org to move fast without compromising safety.
Minimum Requirements
  • Have 8+ years of experience in Security GRC, ideally with time spent in fast-paced startup environments where you've built security practices from the ground up.
  • Have a startup mindset: you're scrappy, pragmatic, and move quickly to solve the most critical problems.
  • You're proficient with NIST CSF, OCC's Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or other similar global frameworks.
  • Proven prior experience with regulatory audits from Global auditors across Security domains.
  • Thrive in ambiguity and know how to ruthlessly prioritize.
  • Can balance security rigor with speed, especially in fast-moving environments.
  • Demonstrated history converting complex policy, audit, and regulatory mandates into actionable operational and engineering controls.
  • Broad technical depth across cloud architecture, identity management, appsec, data protection, and incident response operations.
  • A track record of evaluating control environments, uncovering underlying risks, and executing sensible, long-term solutions.
  • Strong program execution skills: crafting strategic roadmaps, setting milestones, navigating cross-team blockers, and driving remediation projects to completion.
  • A collaborative approach to partnering across engineering, product, compliance, legal, and audit teams.

Preferred Qualifications
  • Have experience building or scaling security programs through execution, either at a startup or in an embedded role.
  • Are excited about the potential of crypto and stablecoins to power global financial infrastructure (you don't need deep prior knowledge-just curiosity and openness to learn).

About Stripe

Stripe is a technology company that builds economic infrastructure for the internet. Businesses of every size—from new startups to public companies—use our software to accept payments and manage their businesses online. Stripe helps new companies get started and grow their revenues, and established businesses accelerate into new markets and launch new business models. Stripe powers businesses all over the world, from the new startup that just launched yesterday to the Fortune 500 companies that we all know and love. Stripe is headquartered in San Francisco, with offices in Dublin, London, Paris, Singapore, Tokyo, and more.
Learn more about Stripe
Size
4,000 employees
Industry
Founded
2010

Similar Jobs

More Jobs at Stripe

More Enterprise Technology Jobs

Find similar Security GRC Analyst/Program Manager, Bridge jobs: