Startups

Security GRC Program Manager, Third Party Risk

Stripe · US - Hybrid · Hybrid

← All jobs
About Stripe

Stripe is a financial services platform that helps all types of businesses accept payments, build flexible billing models, and manage money movement. Backed by General Catalyst, Khosla and Kleiner Perkins.

About the role

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • 4+ years of relevant experience in third-party security risk, security assessments, information security, or a related risk-management function
  • Experience conducting end-to-end third-party security assessments, including reviewing security documentation, identifying control gaps, determining risk, and defining remediation requirements
  • Working knowledge of common security and assurance frameworks, such as SOC 2, ISO 27001, PCI DSS, NIST, and CSA
  • Sound judgment and analytical skills, including the ability to distinguish material security risks from lower-priority findings and recommend a proportionate response
  • Ability to independently manage multiple assessments, priorities, and stakeholder relationships while meeting defined timelines
  • Clear written and verbal communication skills, including the ability to explain technical security findings to non-security stakeholders
More about this role

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.

The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders. The team also manages security risk arising from Stripe’s relationships with third parties by assessing their security controls, identifying and mitigating...

Read the full posting on Stripe's site ↗

Office of the CISO & Partnership

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.