Program Manager, Security Business Enablement

Stripe is a financial infrastructure platform for businesses, aiming to increase the GDP of the internet. The Security team focuses on improving security and building trust with customers and partners. The Security Business Enablement team supports sales, marketing, legal, and privacy by engaging with customers to communicate security activities.

Location: United States

Responsibilities

• Function as an information security subject matter expert and lead cross-functional teams to engage with customers and partners to build trust and grow our business
• Serve as the main point of contact for all go-to-market related requests
• Operate autonomously, leading large-scale efforts to implement and operate tooling and automation across multiple teams and functions, with stakeholders in different disciplines and time zones
• Identify and evaluate information security control gaps and oversee remediation efforts, in partnership with control owners
• Develop information security policies and standards based on cybersecurity framework guidelines
• Develop, define, and report on the team’s program health and success metrics to provide insights to management to help drive strategic direction

Requirements

• Subject matter expert in information security frameworks, practices, policies, standards and procedures (e.g. NIST CSF, PCI DSS, ISO 27001, SOC 2 or equivalent)
• Understanding of how to balance business needs with security requirements and focus on business outcomes
• 5+ years engaging with customer and partner business, engineering, security, compliance, and legal teams as part of the go-to-market sales cycle
• Experience driving large-scale projects and programs from start to finish within highly complex operating environments
• Strong written and verbal communication skills, building strong relationships at all levels of the organization from executives to project teams
• Ability to communicate clear and succinct security compliance controls and requirements with external stakeholders, including security counter-parties at global financial institutions
• Strong background in information security operations, risks and controls identification, and assessment
• Critical thinker, passionate, self-driven, and detail-oriented