Stripe
Security GRC Analyst/Program Manager, Bridge
New York +1 · Manager · Full-time · Posted Sep 29, 2026
- Location
- New York
US - Experience
- 8+ years in Security GRC; ideally includes experience in fast-paced startups building security practices from the ground up.
About the job
Build and scale Bridge’s security governance, risk, and compliance foundation while managing security risks, controls, and audit readiness.
What you'll do
- Identify and address key security risks; reinforce secure engineering and infrastructure practices.
- Adapt Stripe security programs and develop Bridge-specific approaches where needed.
- Coordinate with engineering, product, and Stripe security teams to meet compliance and audit expectations and drive remediation.
What they ask for
- 8+ years of experience in Security GRC.
- Proficiency with NIST CSF, OCC’s Cybersecurity Supervision Work Program, FFIEC IT Examination Handbook, or similar global frameworks.
- Prior experience with regulatory audits from global auditors across security domains.
- Technical depth across cloud architecture, identity management, application security, data protection, and incident response operations.
Nice to have
- Experience building or scaling security programs at a startup or in an embedded role.
- Interest in crypto and stablecoins, with curiosity and openness to learn.
Tools
NIST CSF, OCC’s Cybersecurity Supervision Work Program, FFIEC IT Examination Handbook
Model-written summary · the original posting is authoritative