Security GRC Analyst/Program Manager, Bridge

A senior security GRC analyst and program manager at Bridge, Stripe's stablecoin payments business, charged with designing Bridge's security GRC programs from scratch while borrowing Stripe's established controls and processes where they fit. The role targets Bridge's biggest security risks first, turns policy, audit and regulatory demands into working operational and engineering controls, strengthens secure development practice, and keeps Bridge ready for audits as it moves into more regulated markets, working with engineering, product and Stripe's security organisation.

Stripe asks for eight or more years in security GRC, ideally including building a practice at a startup, fluency in NIST CSF, the OCC cybersecurity work program or the FFIEC handbook, experience with regulatory audits, and broad technical grounding across cloud, identity, AppSec and incident response. Based in New York.