Program Manager, Security GRC

Other Jobs To Apply

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world's largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team

The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.

The Security Governance, Risk, and Compliance (SGRC) team at Stripe provides security governance, risk management, and compliance capabilities to allow Stripe to make strategic security decisions, measure our risk and control posture, and represent Stripe Security to internal and external entities. The successful operation of our organization accelerates Stripe by optimizing the communication and expectations of our security program.

What you’ll do

We're looking for a Security GRC Program Manager with deep expertise in security compliance to serve as the primary interface between Stripe's Security organization and external auditors, regulators, and compliance stakeholders. In this role, you'll represent the Security team in audit engagements, articulate how Stripe's security controls are designed and how they operate, and ensure that compliance obligations across a complex global regulatory landscape are met with consistency and rigor.

In this role, you will act as a proxy between external entities like regulators and auditors, and our internal security teams, ensuring consistency in compliance responses and helping maintain a lean and effective compliance program. The ideal candidate is adaptable and finds structure in an evolving and maturing organization.

Responsibilities

  • Act as an information security subject matter expert during cross-functional audit engagements, representing the Security team in walkthrough meetings with auditors and regulators
  • Serve as the internal liaison (proxy) between  and the Security organization to ensure audits are managed effectively and consistently
  • Create and maintain a central repository of audit evidence artifacts required for compliance with SOC 2, PCI DSS, SOX, and other global regulatory standards
  • Perform security risk and control assessments against common frameworks to ensure compliance with Stripe's Information Security Policy and Standards and applicable regulations (e.g., ISO 2700x, PCI DSS, SOX, NIST, COBIT)
  • Support control owners with guidance on security control design and redesign to ensure continued compliance and effectiveness
  • Facilitate security compliance support for Stripe's legal entities with regulatory obligations, and collaborate with cross-functional stakeholders to track and report on control remediation efforts
  • Support broader GRC team program initiatives, including policy writing, security awareness training, and third-party security risk assessments

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

  • Subject matter expert in information security frameworks, practices, policies, standards, and procedures (e.g., NIST CSF, SOC 2, PCI DSS, ISO 27001/2, or equivalent)
  • 6+ years of experience in Security Governance, Risk, and Compliance or Technology Compliance roles with a strong understanding of audit processes
  • Exposure to global regulatory requirements (e.g., DORA, FFIEC, EBA, NYDFS) and experience integrating them into compliance programs
  • Experience conducting security audits and supporting compliance across complex, overlapping regulatory frameworks
  • Strong program management skills with proficiency in coordinating security assessments and managing multiple stakeholder engagements across time zones
  • Excellent communication skills, with the ability to build relationships at all levels and translate technical security concepts for auditors, regulators, and executive audiences
Back to blog

Other Jobs To Apply

Email Copywriter/Marketer

Healthcare White Paper Writer - Remote

Remote | Lawyer/Legal Writer — \$90–\$140/hour

[Remote] UX Writer

Senior Technical Writer (Remote)

Customer Service Specialist - Remote Opportunity – Jacksonville, FL and Atlanta, GA – Bilingual Spanish Preferred

Dynamic Remote Phone Customer Service Representative – Wellness & Supplement Specialist – Elevate Your Career with arenaflex’s eCommerce Excellence

REMOTE WORK AT HOME DATA ENTRY PART TIME - CUSTOMER SERVICE

Email Customer Support Specialist (Non-Voice)

Quality Analyst - Outpatient, Healthcare

Work From Home - Client Support Manager

Remote Reservations Agent (Full-time Only)

Remote Technical Support Specialist I

Customer Onboarding Specialist at reputed company

Account Manager II (Remote)

Client Success Manager (Remote)

Remote Customer Support - Chat & Ticket Support - Gaming - 06/2026

Amazon Customer Service Representative (Remote)

SEO Specialist (Remote / WFH)

TikTok Ads Performance Specialist

Remote Meta Ads Specialist

CMO - Chief Marketing Officer (Remote)

Brand Strategist (Remote | $150–$350/hr)

Funnel Strategist

Paid Search Strategist

Paid Social Strategist

YouTube Manager (Contract)

Growth Marketing Specialist

Direct Response Media Buyer at Clients Blackbox: 100% Remote (US)

GA4 Specialist Needed — Advanced Analytics, Conversion Tracking & Attribution Setup

ASO/SEO Specialist

Growth Hacker - Remote

Retention Marketing Specialist (On-Site ONLY/ No Remote Work)

REMOTE: Marketing Operations Manager-Marketo

Senior Brand Manager, Integrated Marketing

[Remote] Marketing Manager

SEO Specialist (Remote US)

Power BI / Power Automate Specialist

[Remote] AI Principal Engineer

Staff Engineer - Full Time - Remote

Azure API Developer / Remote, ,6 Months Contract

Ruby Engineer - AI Training (Part Time, Freelance, Remote, 20+ openings)

AI Game Developer at Scopely: 100% Remote (Culver City, CA, US)

SQL Developer (T-SQL) Remote (OH, USA) Contract

Natural Language Processing (NLP) Engineer

Generative AI Automation Engineer - Remote Job

Remote AI Prompt Engineer (Flexible Hours)

Open for C2C- Remote Positons- RPA Developer (Automation Anywhere)

ServiceNow Developer at Information Technology Strategies - IT-Strat: 100% Remote (US)

[Remote] Data Engineer / Analytics Engineer (dbt + reputed company) - Mid-Senior Level

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...