The opportunity
We're creating an entirely new payments platform, built with stablecoins, to simplify global money movement. Bridge enables faster, cheaper payments and borderless access to dollars via stablecoins.
What you'll do
Identify and tackle Bridge’s most important security risks quickly and pragmatically.
Adopt Stripe’s programs, controls and processes where it makes sense, and: find custom approaches where it doesn’t.
Reinforce engineering best practices around secure development and infrastructure.
Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.
Collaborate cross-functionally with engineering, product, and Stripe’s: security org to move fast without compromising safety.
What they're looking for
- Have 8+ years of experience in Security GRC, ideally with time spent in: fast-paced startup environments where you’ve built security practices from the ground up.
- Have a startup mindset: you’re scrappy, pragmatic, and move quickly to solve the most critical problems.
- You’re proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program: and/or FFIEC IT Examination Handbook or other similar global frameworks.
- Proven prior experience with regulatory audits from Global auditors across Security domains.
- Thrive in ambiguity and know how to ruthlessly prioritize.
- Can balance security rigor with speed, especially in fast-moving environments.
- Demonstrated history converting complex policy, audit, and regulatory: mandates into actionable operational and engineering controls.
- Broad technical depth across cloud architecture, identity management, appsec,: data protection, and incident response operations.
