Program Manager, Stripe

Technology Audits

$139.7-209.5k

Mid and Senior level
Toronto
Stripe

A financial infrastructure platform for businesses

Open for applications

Stripe

A financial infrastructure platform for businesses

1001+ employees

FintechB2BPaymentsCredit cardsFinancial Services

Open for applications

$139.7-209.5k

Mid and Senior level
Toronto

1001+ employees

FintechB2BPaymentsCredit cardsFinancial Services

Company mission

To increase the GDP of the internet

Role

Who you are

  • 4+ years of experience working in the security regulatory/compliance field and 2+ years particularly scoping, leading SOC audits
  • Expertise in the security practices of the payment industry and in other security regulations (AICPA trust principles, NIST, ISO)
  • Technical security-specific background and an understanding of the digital economy
  • Solid understanding of security risks and threats, and in developing effective and measurable mitigation programs
  • A growth mind-set to help scale security compliance initiatives for the future of Stripe
  • Great communicator and able to effectively prioritize and advance a large number of projects happening simultaneously, often on tight deadlines
  • Experience building and managing relationships with internal stakeholders and driving all parties towards an optimal outcome
  • Out-of-the-box thinking that challenges industry norms with a solid grounding in creating great and safe experiences
  • Resourceful, action-oriented with strong organization skills and attention to detail
  • Able to prioritize competing demands while working on complex problems

What the job involves

  • What you’ll do We’re looking for someone to support our security and technology assessments (SOC 1&2), create a strong control ownership culture internally, and ensure Stripe products enable compliance for our users
  • The right person for this role will have deep technical discussions with our engineering teams to understand controls, processes and come up with creative ways to meet the intent of regulatory requirements
  • This means not only understanding multiple technical regulations but also having a technical understanding of common technologies and systems to have constructive discussions with our engineering teams
  • Also, this person should be someone who has experience formally managing compliance programs and enjoys doing them
  • Conduct and lead external audits, working closely with our Product and Engineering teams to ensure that our services and users remain compliant and ahead of applicable security standards
  • Partner with control owners and team on automation of evidence collection and control monitoring
  • Integrate new products and services into current compliance audits. Perform scoping, assist with control implementation and control testing for new products and services
  • Partner with Engineering teams to decompose ambiguous technical regulatory requirements into clear actionable deliverables
  • Maintain and enhance compliance to product security requirements
  • Stay abreast of upcoming security regulatory changes that may impact Stripe or our users, and collaborate with engineering teams to make them seamless and transparent
  • Be a force multiplier for our customers—helping us devise ways of minimizing the burden of compliance so they can better grow their business
  • Partner with teams across Stripe to develop our communication strategy on Security
  • Identifying inefficiencies in processes and products and driving improvements

Otta's take

Theo Margolius headshot

Theo Margolius

COO of Otta

Stripe, nowadays a FinTech giant, spent the first few years since its founding building up its payments business, which primarily consisted of providing an API to eCommerce businesses so that they could easily integrate a payments option in their apps or websites, where before there was none.

More recently, Stripe has started to accelerate its growth with a significantly larger range of financial services including cash advances and credit cards. They also plan to build incorporation services, fraud protection, and more, diversifying its revenue away from payments and differentiating itself from its competitors.

To further expand its position, the company is looking to triple its presence in Ireland, and extend its services to countries with vast customer potential, including Brazil and India. Its latest venture, coming atop significant new funds, is to partner with OpenAI, the company behind ChatGPT - a win-win collaboration that will monetize OpenAI’s flagship products and at the same time enhance Stripe with GPT-4, as it moves forwards with intentions to "build the payments foundation for tomorrow's AI economy."

Insights

Top investors

Some candidates hear
back within 2 weeks

-5% employee growth in 12 months

Company

Funding (last 2 of 13 rounds)

Mar 2023

$6.5bn

GROWTH EQUITY VC

Mar 2021

$600m

SERIES H

Total funding: $8.7bn

Company benefits

  • Unlimited paid time off policy
  • Work from home opportunities
  • Comprehensive mental, physical and medical health plans
  • Fertility benefits and parental leave

Company values

  • Built for builders - The best reason to work at Stripe is that you will have colleagues who support and challenge you to do the best work of your career. We combine a big-picture mindset with obsessive attention to the details, down to the last pixel, API parameter, and word.
  • An environment of growth - We care about results more than CVs. We value managers who remain experts while developing talent and designing successful orgs. You can also have a big impact and advance far without managing anyone. We want you to take what you’ve been hired to do, and show us how it’s done – you might create something we never would have imagined. We have had account managers start a publishing arm, interns who have run business units, and hackathon participants who have built company-defining products.
  • Fast-paced, detail oriented - We balance innovation with scrupulous attention to every bit and byte involved in the movement of money – because we can’t do our job well unless we do both. When we started, we emailed every API error to everyone at the company. Now, we have more than 250 million API requests a day – and we still care about each one.
  • Voraciously curious - We wish there was a book that described what we need to do next (we’d even publish it), but since there isn’t, we all have to write it together. You will need to find answers to questions you’ve never been asked before. Sometimes, you will be the first person ever to contemplate a particular problem. We want people who devour books for fun and approach new challenges with eager curiosity.

Company HQ

SoMa, San Francisco, CA

Founders

Patrick Collison

(Content Strategist)

Studied maths at MIT before founding Stripe. Also on the board of the Long Now Foundation.

John Collison

(President)

Studied at Harvard but dropped out to found Stripe.

Salary benchmarks

We don't have enough data yet to provide salary benchmarks for this role.

Submit your salary to help other candidates with crowdsourced salary estimates.

Share this job

View 222 more jobs at Stripe