Security GRC Analyst/Program Manager, Bridge

Monograph; United States; Remote; USD 190,000 - 286,000; Full time

Benefits offered by this job

Equity

Bonus / commissions

401(k)

Health benefits

Wellness stipend

Job summary

Bridge is hiring a Security Analyst / Program Manager to build and scale its security foundation. You will design governance, risk and compliance programs from the ground up and leverage mature security practices across the org.

You will collaborate with engineering, product, and Stripe’s security team to move fast while maintaining safety, and you will help Bridge meet global regulatory expectations as we expand into more markets.

Qualifications

• 8+ years of experience in Security GRC in startup environments.
• Startup mindset: scrappy, pragmatic and able to move quickly to solve critical problems.
• Proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or similar frameworks.
• Experience with regulatory audits from global auditors across security domains.
• Ability to translate complex policy, audit and regulatory mandates into actionable operational and engineering controls.
• Strong program execution skills and ability to craft strategic roadmaps and milestones.

Responsibilities

• Identify Bridge’s most important security risks quickly and pragmatically.
• Adopt Stripe’s programs, controls and processes where suitable and tailor when needed.
• Reinforce engineering best practices around secure development and infrastructure.
• Ensure Bridge meets compliance and audit expectations as we scale in regulated markets.
• Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety.

Skills

Security GRC

Startup mindset

NIST CSF

Regulatory audits

Policy to engineering controls

Cloud security

Identity management

AppSec

Incident response

Program execution

Job description

Who we are

About Bridge

We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins. Through our APIs, businesses can send and receive funds across borders faster and cheaper vs. SWIFT and other fiat-only rails. Our virtual accounts enable international consumers and businesses to easily access, store, and spend US dollars. Our payouts infrastructure enables platforms to disburse USD to anyone globally. We believe many trillions of dollars will move and settle through stablecoin payment rails. Bridge is pulling this future forward.

We have a small team of people who have previously built financial infrastructure at some of the world's leading companies (Coinbase, Stripe, Square, Brex, Upstart, DoorDash, Airbnb), and each and every one of them chose Bridge because they fundamentally believe that stablecoins will be a critical piece of financial infrastructure that allows for the improvement of global money movement.

About the Role

We’re hiring a Security Analyst / Program Manager to build and scale Bridge’s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.

Responsibilities

• Identify and tackle Bridge’s most important security risks quickly and pragmatically.
• Adopt Stripe’s programs, controls and processes where it makes sense, and find custom approaches where it doesn’t.
• Reinforce engineering best practices around secure development and infrastructure.
• Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.
• Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety.

Minimum Requirements

• Have 8+ years of experience in Security GRC, ideally with time spent in fast-paced startup environments where you’ve built security practices from the ground up.
• Have a startup mindset: you’re scrappy, pragmatic, and move quickly to solve the most critical problems.
• You’re proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or other similar global frameworks.
• Proven prior experience with regulatory audits from Global auditors across Security domains.
• Thrive in ambiguity and know how to ruthlessly prioritize.
• Can balance security rigor with speed, especially in fast-moving environments.
• Demonstrated history converting complex policy, audit, and regulatory mandates into actionable operational and engineering controls.
• Broad technical depth across cloud architecture, identity management, appsec, data protection, and incident response operations.
• A track record of evaluating control environments, uncovering underlying risks, and executing sensible, long-term solutions.
• Strong program execution skills: crafting strategic roadmaps, setting milestones, navigating cross-team blockers, and driving remediation projects to completion.
• A collaborative approach to partnering across engineering, product, compliance, legal, and audit teams.

Preferred Qualifications

• Have experience building or scaling security programs through execution, either at a startup or in an embedded role.
• Are excited about the potential of crypto and stablecoins to power global financial infrastructure (you don’t need deep prior knowledge—just curiosity and openness to learn).

Working remotely at Stripe

A remote location is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently live or plan to live.

Pay and benefits

The annual US base salary range for this role is $190,400 - $285,600. For sales roles, the range provided is the role’s On Target Earnings ("OTE") range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and location. Applicants interested in this role and who are not located in the US may request the annual salary range for their location during the interview process.

Additional benefits for this role may include: equity, company bonus or sales commissions/bonuses; 401(k) plan; medical, dental, and vision benefits; and wellness stipends.

We look forward to hearing from you.

At Stripe, we’re looking for people with passion, grit, and integrity. You’re encouraged to apply even if your experience doesn't precisely match the job description. Your skills and passion will stand out—and set you apart—especially if your career has taken some extraordinary twists and turns. At Stripe, we welcome diverse perspectives and people who think rigorously and aren't afraid to challenge assumptions. Join us.

Please find our California applicant personal information notice here.

The application window will remain open for 100 days after the Job Post is published. However, this opportunity will remain open based on the needs of the business, which may cause the application window to close before or after the 100-day mark.

• Company: Bridge
• Team: Money Movement and Storage
• Remote location: Remote in United States
• Employment type: Full time