Program Manager, Security GRC

📋 Description

• Act as security SME in cross-functional audit engagements with auditors/regulators
• Serve as internal liaison between Security and auditors to ensure consistent audits
• Create and maintain a central repository of audit evidence for SOC 2, PCI DSS, SOX
• Perform risk and control assessments against frameworks (ISO 27001/27002, PCI DSS, NIST, COBIT)
• Guide control owners on security control design and redesign for ongoing compliance
• Facilitate security compliance for Stripe's entities and track remediation with stakeholders

🎯 Requirements

• SME in information security frameworks, practices, and standards (NIST CSF, SOC 2, PCI DSS)
• 6+ years in Security GRC or Technology Compliance with audit experience
• Exposure to global regs (DORA, FFIEC, EBA, NYDFS) in compliance programs
• Experience conducting security audits across complex regulatory frameworks
• Strong program management; coordinating assessments across time zones
• Excellent communication; translate security concepts for auditors and execs