Security GRC Analyst/Program Manager, Bridge

Stripe is hiring a Security GRC Analyst/Program Manager, Bridge in New York. This is full-time work at Stripe's location. Stripe has not published a salary for this role, so it is worth asking about pay early in the process.

Here is the role as Stripe describes it.

Who we are

About Bridge

We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins. Through our APIs, businesses can send and receive funds across borders faster and cheaper vs. SWIFT and other fiat-only rails. Our virtual accounts enable international consumers and businesses to easily access, store, and spend US dollars. Our payouts infrastructure enables platforms to disburse USD to anyone globally. We believe many trillions of dollars will move and settle through stablecoin payment rails. Bridge is pulling this future forward.

We have a small team of people who have previously built financial infrastructure at some of the world's leading companies (Coinbase, Stripe, Square, Brex, Upstart, DoorDash, Airbnb), and each and every one of them chose Bridge because they fundamentally believe that stablecoins will be a critical piece of financial infrastructure that allows for the improvement of global money movement.

About the Role

We’re hiring a Security Analyst / Program Manager to build and scale Bridge’s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.

Responsibilities

Identify and tackle Bridge’s most important security risks quickly and pragmatically.

Adopt Stripe’s programs, controls and processes where it makes sense, and find custom approaches where it doesn’t.

Reinforce engineering best practices around secure development and infrastructure.

Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.

Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety.

Minimum Requirements

Have 8+ years of experience in Security GRC, ideally with time spent in fast-paced startup environments where you’ve built security practices from the ground up.

Have a startup mindset: you’re scrappy, pragmatic, and move quickly to solve the most critical problems.

You’re proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or other similar global frameworks.

Proven prior experience with regulatory audits from Global auditors across Security domains.

Thrive in ambiguity and know how to ruthlessly prioritize.

Can balance security rigor with speed, especially in fast-moving environments.

Demonstrated history converting complex policy, audit, and regulatory mandates into actionable operational and engineering controls.

Broad technical depth across cloud architecture, identity management, appsec, data protection, and incident response operations.

A track record of evaluating control environments, uncovering underlying risks, and executing sensible, long-term solutions.

Strong program execution skills: crafting strategic roadmaps, setting milestones, navigating cross-team blockers, and driving remediation projects to completion.

A collaborative approach to partnering across engineering, product, compliance, legal, and audit teams.

Preferred Qualifications

Have experience building or scaling security programs through execution, either at a startup or in an embedded role.

Are excited about the potential of crypto and stablecoins to power global financial infrastructure (you don’t need deep prior knowledge-just curiosity and openness to learn).

Questions about this job

Does Stripe list a salary for this job?

Stripe has not included pay in the posting.

Is this a remote, hybrid or office job?

No, it is an on-site job in New York.

What does Stripe look for in candidates?

The posting mentions at least 8 years of relevant experience and skills such as Rails and Cybersecurity. Read the full description above for the complete list.

How do I apply for the Security GRC Analyst/Program Manager, Bridge job?

Use the apply button on this page. It takes you to Stripe's own application form, so your CV goes directly to their hiring team.

Is this job still open?

Stripe published the role on September 29, 2026. We check the employer's job board every day and take this page down when the role closes, so if you can read it, the job was still listed at our last check.

Source: Stripe careers page (stripe.com). Applications go straight to the employer. We check the listing daily and remove it once it closes.