Program Manager, Engineering - Technology GRC

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone s reach while doing the most important work of your career. About the team The Technology Governance, Risk, and Compliance (GRC) team is dedicated to delivering excellence across Stripe s compliance with global and industry-specific technology control regimes, such as PCI-DSS, SOC, and other international technology certifications. We are a team of specialist program managers to lead external audits of Stripe s technology environment, design and improve technology controls, and support our many engineering and business partners in maintaining compliance with controls requirements. We are consultants to company leaders, partners to our external auditors, builders of risk-reducing controls and internal products, and effective executors of large programs that are integral to the trust our Users place in Stripe and that of our regulators and partners. What you ll do In this role, your daily focus centers on bridging the gap between compliance requirements and high-velocity engineering. You will be a subject matter expert in technology compliance standards to ensure that Stripe s products and platform operate in accordance with the requirements they are subject to. You will apply critical thinking to define compliant workflows, design effective controls, and drive adoption of those workflows across engineering and operations teams. You ll advise peers on secure and compliant architecture, drive decisions that maintain an always-on audit posture, and ensure compliance is embedded in engineering roadmaps and delivery processes. You ll translate technology risk into practical controls, track remediation progress, and continuously improve controls and workflows to support audit readiness and operational resilience. On any given day, you conduct a gap analysis for a new global compliance certification, prioritize remediation tasks based on a data-driven risk assessment, or translate complex ISO and SOC 2 controls into actionable technical tickets for product engineers. You will work with cross-functional teams