Security GRC Program Manager

Job Summary

Serving as the primary interface between Stripe's Security organization and external auditors, the full-time remote Security GRC Program Manager will manage audit engagements, ensure compliance with global regulatory standards, and maintain a central repository of audit evidence artifacts.

Key responsibilities

• Act as an information security subject matter expert during cross-functional audit engagements with auditors and regulators
• Create and maintain a central repository of audit evidence artifacts for compliance with SOC 2, PCI DSS, SOX, and other regulatory standards
• Support control owners with guidance on security control design to ensure ongoing compliance and effectiveness

Required qualifications

• Subject matter expert in information security frameworks such as NIST CSF, SOC 2, PCI DSS, ISO 27001/2
• 6+ years of experience in Security Governance, Risk, and Compliance or Technology Compliance roles
• Experience with global regulatory requirements and integrating them into compliance programs
• Proven experience conducting security audits across complex regulatory frameworks
• Strong program management skills with proficiency in coordinating security assessments across multiple stakeholders