Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career.

About the team & role

The Compliance Foundations group is dedicated to delivering excellence across Stripe’s compliance with global and industry-specific technology control regimes, such as PCI-DSS, SOC, and Internal Controls over Financial Reporting. In addition to engineering teams that build and run our internal compliance products, we include teams of specialist program managers to lead external audits of Stripe’s technology environment, design and improve technology controls, and support our many engineering and business partners in maintaining compliance with controls requirements. We are consultants to company leaders, partners to our external auditors, builders of risk-reducing controls and internal products, and effective executors of large programs that are integral to the trust our Users place in Stripe and that of our regulators and partners.

What you’ll do

Reporting directly to the Head of Infrastructure Compliance, you will be a pivotal leader and contributor in the design, implementation, and continuous improvement of IT General Controls (ITGC) as part of Stripe's comprehensive Internal Controls over Financial Reporting (ICFR) program. You will own the strategic direction and execution of ITGC initiatives, ensuring compliance, mitigating risks, and driving operational efficiency across engineering systems and processes. We expect this role to grow in scope given the level of experience and seniority expected of our ideal candidate with the ability to shape broad change in our overall Compliance Foundations work and elevate the impact of our program management and engineering teams. Key responsibilities will include the following:

• Define and lead the end-to-end strategy for ITGCs and related technology controls within the ICFR program, including design, implementation, testing, and ongoing improvement.
  
• Serve as the key interlocutor to external audit teams, including senior leadership in those firms and, when applicable, representatives of global regulators, to communicate understanding about Stripe’s approaches to technology risk.
  
• Partner with engineering, finance, and other partner teams to translate control requirements into actionable control designs that reflect not only the letter of the requirement, but best practices for controlling risk in our technology systems.
  
• Drive complex, cross-functional programs focused on enhancing ITGC effectiveness, identifying potential roadblocks, and proactively mitigating risks.
  
• Champion a culture of control consciousness within engineering, influencing best practices and building strong alignment across diverse technical teams.
  
• Leverage extensive data analysis and technical understanding to identify control gaps, prioritize remediation efforts, and drive strategic decisions at the executive level where resourcing and company-wide initiatives are required.
  
• Develop and iterate on program management frameworks, metrics, and reporting mechanisms to ensure transparency, accountability, and continuous improvement of the ITGC program.
  
• Act as a principal adviser and subject matter expert on technology controls, providing guidance and thought leadership to engineering teams, senior leadership, and external auditors.
  
• Mentor and elevate the program management capabilities of peers and engineering teams, fostering a strong understanding of control principles and execution excellence.
  
• Lead the assessment of new systems, technologies, and processes for their impact on ITGC, ensuring control considerations are embedded from inception.
  

Who you are

We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• 10+ years of software engineering, systems engineering, technical program management, and/or technology compliance experience, with a significant focus on IT General Controls or similar regulatory compliance programs.
  
• Deep expertise in IT General Controls (e.g., access management, change management, application-level controls) and their application within an ICFR framework.
  
• Extensive experience leading large-scale, complex programs across multiple engineering teams and functions, with a demonstrated ability to drive consensus and results.
  
• Exceptional communication and interpersonal skills, with a proven ability to influence and collaborate effectively with both technical and non-technical stakeholders at all levels, including executive leadership.
  
• Strong analytical and problem-solving skills, with a track record of identifying critical issues, challenging norms, and making data-driven decisions that impact organizational strategy.
  
• Demonstrated ability to operate autonomously and lead strategic initiatives, navigating ambiguity and driving clarity in highly dynamic environments.
  
• Familiarity with industry standards and regulations related to technology controls (e.g., SOX, COSO, ISO, etc.).
  

Preferred qualifications

• Experience leading teams or previously serving as the principal individual contributor in a large, complex technology company in roles that blend technical understanding and compliance thinking and communication.
  
• Proficient knowledge in enterprise-level system architecture, cloud-native infrastructure, and modern software development lifecycles.
  
• Hands-on experience in configuring secure and reliable systems and directing or contributing to software controls development.
  
• Proven ability to leverage a variety of tools to develop key metrics and broadcast program efficacy through data-driven dashboards.