Security GRC Analyst/Program Manager, Bridge

Details

Bridge is creating a payments platform built with stablecoins to simplify global money movement. The platform provides APIs for cross-border payments, virtual accounts for accessing and managing U.S. dollars, and payouts infrastructure for global disbursements.

The Security Analyst / Program Manager will build and scale Bridge's security foundation, design security governance, risk, and compliance programs from the ground up, and leverage the infrastructure, best practices, and tooling of Stripe's security organization.

Responsibilities

• Identify and address Bridge's most important security risks quickly and pragmatically.
• Adopt Stripe's programs, controls, and processes where appropriate, while developing custom approaches when needed.
• Reinforce engineering best practices around secure development and infrastructure.
• Ensure Bridge meets compliance and audit expectations as it expands into more regulated markets.
• Collaborate with engineering, product, and Stripe's security organization to move quickly without compromising safety.

Requirements

• 8+ years of experience in Security GRC, ideally including work in fast-paced startup environments where security practices were built from the ground up.
• A startup mindset with a pragmatic, scrappy, and fast-moving approach to solving critical problems.
• Proficiency with NIST CSF, OCC's Cybersecurity Supervision Work Program, FFIEC IT Examination Handbook, or similar global frameworks.
• Proven experience with regulatory audits conducted by global auditors across security domains.
• Ability to thrive in ambiguity and prioritize effectively.
• Ability to balance security rigor with speed in fast-moving environments.
• Demonstrated experience converting complex policy, audit, and regulatory mandates into actionable operational and engineering controls.
• Broad technical depth across cloud architecture, identity management, application security, data protection, and incident response operations.
• Experience evaluating control environments, uncovering underlying risks, and executing sensible, long-term solutions.
• Strong program execution skills, including crafting strategic roadmaps, setting milestones, navigating cross-team blockers, and driving remediation projects to completion.
• A collaborative approach to partnering across engineering, product, compliance, legal, and audit teams.

Preferred Qualifications

• Experience building or scaling security programs through execution, either at a startup or in an embedded role.
• Interest in the potential of crypto and stablecoins to power global financial infrastructure; deep prior knowledge is not required.