Remote Security GRC Lead & Program Manager

Monograph; United States; Remote; USD 190,000 - 286,000; Full time

Benefits offered by this job

Equity

Bonus / commissions

401(k)

Health benefits

Wellness stipend

Job summary

Bridge is hiring a Security Analyst / Program Manager to build and scale its security foundation. You will design governance, risk and compliance programs from the ground up and leverage mature security practices across the org.

You will collaborate with engineering, product, and Stripe’s security team to move fast while maintaining safety, and you will help Bridge meet global regulatory expectations as we expand into more markets.

Qualifications

• 8+ years of experience in Security GRC in startup environments.
• Startup mindset: scrappy, pragmatic and able to move quickly to solve critical problems.
• Proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or similar frameworks.
• Experience with regulatory audits from global auditors across security domains.
• Ability to translate complex policy, audit and regulatory mandates into actionable operational and engineering controls.
• Strong program execution skills and ability to craft strategic roadmaps and milestones.

Responsibilities

• Identify Bridge’s most important security risks quickly and pragmatically.
• Adopt Stripe’s programs, controls and processes where suitable and tailor when needed.
• Reinforce engineering best practices around secure development and infrastructure.
• Ensure Bridge meets compliance and audit expectations as we scale in regulated markets.
• Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety.

Skills

Security GRC

Startup mindset

NIST CSF

Regulatory audits

Policy to engineering controls

Cloud security

Identity management

AppSec

Incident response

Program execution

Job description

Bridge is hiring a Security Analyst / Program Manager to build and scale its security foundation. You will design governance, risk and compliance programs from the ground up and leverage mature security practices across the org.

You will collaborate with engineering, product, and Stripe’s security team to move fast while maintaining safety, and you will help Bridge meet global regulatory expectations as we expand into more markets.