Compliance Program Manager, Technology Audits

Who we are 

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the Internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

The Technology Audits team is responsible for Stripe's Technology and Compliance Audits. We have a team of technical program managers who focus on driving compliance within Stripe against industry/regulatory standards and helping us achieve compliance against them. Program managers in the team not only work on leading compliance and risk efforts to completion but also maintain strong relationships with internal stakeholders to support and answer compliance questions.

What you’ll do 

Along with supporting multiple Technology and Compliance assessments (SOC 1, SOC 2, PCI, Regulatory audits) you will help with creating a centralized approach to manage audits. You will be responsible for designing processes, controls which are capable of meeting the demands of multiple compliance (existing and future) frameworks. The right person for this role will have deep technical discussions with our engineering teams to understand controls, processes and come up with creative ways to meet the intent of regulatory requirements. This means not only understanding multiple technical regulations but also having a technical understanding of common technologies and systems to have constructive discussions with our engineering teams. Also, this person should be someone who has experience formally managing multiple compliance programs and enjoys doing them.

Responsibilities

• Conduct and lead external audits, working closely with our Product and Engineering teams to ensure that our services and users remain compliant and ahead of applicable security standards
• Streamline and effectively manage multiple audits across the organization. 
• Partner with control owners and team on automation of evidence collection. 
• Partner with teams to design and implement control monitoring to build real-time insights into our compliance posture
• Integrate new products and services into current compliance audits. Perform scoping, assist with control implementation and control testing for new products and services
• Partner with Engineering teams to decompose ambiguous technical regulatory requirements into clear actionable deliverables
• Maintain and enhance compliance …