Security GRC Program Manager, Third Party Risk

📋 Description

• Manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements
• Review security questionnaires, independent assurance reports, certifications, penetration-test
• Identify security gaps, determine proportionate remediation requirements, and communicate findings
• Apply Stripe's third-party security standards consistently, documenting assessment results and
• Escalate novel, complex, or high-risk findings and support Enhanced Due Diligence and
• Partner with Procurement, Legal, Privacy, Business Continuity, Security, and business stakeholders

🎯 Requirements

• 4+ years of relevant experience in third-party security risk, security assessments, information
• Experience conducting end-to-end third-party security assessments, including reviewing security
• Working knowledge of common security and assurance frameworks, such as SOC 2, ISO 27001, PCI DSS
• Sound judgment and analytical skills, including the ability to distinguish material security risks
• Ability to independently manage multiple assessments, priorities, and stakeholder relationships
• Clear written and verbal communication skills, including explaining technical security findings to