Program Manager, Third Party Risk

Stripe; San Francisco (CA); On-site; USD 120,000 - 150,000; Full time

Job summary

Stripe is seeking a Program Manager for Third Party Risk to define and oversee their risk framework. This role involves assessing risks associated with third party relationships, ensuring compliance with regulations, and driving operational efficiencies.

The ideal candidate will excel in stakeholder management and possess strong organizational skills. You will maintain existing programs and develop new standards to enhance Stripe's Third Party Risk maturity. Candidates are encouraged to apply, even if their background doesn't perfectly match the description.

Qualifications

• 4+ years of experience in risk or compliance roles, preferably in a regulated environment.
• Proven experience managing distinct projects and programs.
• Exceptional organizational and time management skills.

Responsibilities

• Define, maintain, and oversee the third party risk framework.
• Assess and manage risks in relationships with third parties.
• Support and maintain a robust framework for identifying, assessing, and managing third party risks.

Skills

Stakeholder management

Written and verbal communication

Cross-functional collaboration

Data analysis

Tools

Tableau

Job description

Requirements

• 4+ years of experience in risk or compliance roles, preferably third party risk in a regulated environment
• Proven experience managing distinct projects and programs, with particularly strong skills in stakeholder management
• Strong written and verbal communication skills—including the ability to communicate effectively with different stakeholders across the business such as risk domain owners, internal audit, and the broader risk and compliance community
• Excellent cross-functional collaboration skills, including navigating leadership and interpersonal working relationships
• Exceptional organizational and time management skills
• Ability to handle multiple assignments while comfortably managing ambiguity
• Ability to assess and analyze data in order to solve problems and draw insightful conclusions
• (Desirable) Previous experience building third party risk programs
• (Desirable) Previous experience implementing programs around regulatory frameworks
• (Desirable) Understanding of risk program elements including policy and risk appetite creation and maintenance
• (Desirable) Understanding of risk areas such as information security, privacy, business continuity, finance, reputation, operational, and ESG
• (Desirable) Experience with Tableau or other data visualization tools
• At Stripe, we're looking for people with passion, grit, and integrity. You're encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns

What the job involves

• The Third Party Risk Management (TPRM) team is accountable for defining, maintaining, and overseeing the third party risk framework, policy, and inventory in accordance with management expectations and best practices
• We are focused on assessing and managing risks exposed through our relationships with third parties, adhering to regulatory guidance, and driving operational efficiencies across risk teams
• The purpose of the Program Manager, Third Party Risk is to support and maintain a robust framework for identifying, assessing, and managing third party risks to protect Stripe
• This role will partner with cross-functional Risk Domain Owners, Procurement sub-teams, Legal, and other stakeholders to apply a unified Third Party Risk Framework across risk and compliance areas
• This person maintains the existing Stripe Third Party Risk Program, Policy, and Standards, while further developing new Standards to propel the maturity of the Third Party Risk Program
• Maintain the Global Third Party Risk Management Program, Policy, and Framework, ensuring alignment with relevant regulations, standards, and best practices
• Launch and mature nascent risk domains to increase overall program maturity
• Design and support an enhanced oversight model for specialized third party types including Partnerships, and Contingent Workers
• Design and enhance elements of the existing Third Party Risk Framework including offboarding and incident monitoring, among other areas
• Build and oversee third party performance management function; define performance standards, including metric templates and ongoing monitoring activities, to ensure third party health
• Design effective reporting to monitor and communicate the third party risk program status, key issues, and remediation plans to governance committees, senior leaders, and relevant stakeholders
• Serve as subject matter expert and coordinator of system business requirements among risk domain owners and stakeholders - prioritizing effective requirements (Users First and Risk Focused)