Security Analyst, Bridge at Stripe

### Who this is for This role is designed for a seasoned security professional (8+ years of experience) who thrives in the "zero-to-one" phase of a business. Yo

Work type: onsite

Location: San Francisco, New York City

Salary: $190,400 – $285,600/yr

Type: Full-time

Summary

### Who this is for This role is designed for a seasoned security professional (8+ years of experience) who thrives in the "zero-to-one" phase of a business. You should have a deep background in Security Governance, Risk, and Compliance (GRC), ideally within high-growth startups or fintech. The ideal candidate wants the best of both worlds: the agility of a small team and the massive resources of a global leader like Stripe. ### Key highlights The standout feature of this role is the opportunity to design a security roadmap from the ground up for a stablecoin-powered payments network. While the compensation isn't publicly listed, the position offers high-impact ownership over security governance and regulatory audits across global markets. It is an on-site role based in NYC or San Francisco, offering a high-visibility platform to shape the future of crypto-financial infrastructure. ### You might be a good fit if you... * Have extensive experience with NIST CSF, FFIEC, or OCC cybersecurity frameworks. * Are a "scrappy" problem solver who can balance strict security rigor with the speed of a startup. * Have successfully led regulatory audits with global auditors. * Are curious about the intersection of stablecoins and traditional financial systems.

Job Description

# Who we are

Bridge is Stripe’s fintech innovation hub focused on building a modern, stablecoin-powered cross-border payments network. We operate like a startup within Stripe: fast-paced, entrepreneurial, and product-obsessed, but with the backing of one of the most trusted names in fintech.

We’re hiring aSecurity Analyst / Program Manager to build and scale Bridge’s security foundation. This is a rare opportunity to design the security governance, risk and compliance programs from the ground up, while also leveraging the infrastructure, best practices, and tooling of one of the most mature security organizations in the industry.

# What you'll do

• Design, and implement Bridge’s security governance, risk and compliance roadmaps from first principles to production.

• Identify and tackle Bridge’s most important security risks quickly and pragmatically.

• Adopt Stripe’s programs, controls and processes where it makes sense, and find custom approaches where it doesn’t.

• Lead risk assessment, control design and testing for all Security and Technology Oversight globally.

• Reinforce engineering best practices around secure development and infrastructure.

• Ensure Bridge meets compliance and audit expectations as we scale to more regulated markets.

• Collaborate cross-functionally with engineering, product, and Stripe’s security org to move fast without compromising safety.

You might be a good fit if you:

• Have 8+ years of experience in Security GRC, ideally with time spent in fast-paced startup environments where you’ve built security practices from the ground up.

• Have a startup mindset: you’re scrappy, pragmatic, and move quickly to solve the most critical problems.

• You’re proficient with NIST CSF, OCC’s Cybersecurity Supervision Work Program and/or FFIEC IT Examination Handbook or other similar global frameworks.

• Proven prior experience with regulatory audits from Global auditors across Security domains.

• Thrive in ambiguity and know how to ruthlessly prioritize.

• Can balance security rigor with speed, especially in fast-moving environments.

• Communicate clearly across technical and non-technical partners.

• Have experience building or scaling security programs, either at a startup or in an embedded role.

• Are excited about the potential of crypto and stablecoins to power global financial infrastructure (you don’t need deep prior knowledge—just curiosity and openness to learn).

View this job on nocollar jobs