{"absolute_url":"https://stripe.com/jobs/search?gh_jid=7742552","data_compliance":[{"type":"gdpr","requires_consent":false,"requires_processing_consent":false,"requires_retention_consent":false,"retention_period":null,"demographic_data_consent_applies":false}],"internal_job_id":3395977,"location":{"name":"US-Remote"},"metadata":null,"id":7742552,"updated_at":"2026-09-04T14:12:00-04:00","requisition_id":"See Opening ID","title":"Enterprise Risk Management (ERM) Program \u0026 Automation Lead, MALPB","company_name":"Stripe","first_published":"2026-03-27T12:45:18-04:00","language":"en","application_deadline":null,"content":"\u0026lt;h2\u0026gt;\u0026lt;strong\u0026gt;Who we are \u0026lt;/strong\u0026gt;\u0026lt;/h2\u0026gt;\n\u0026lt;h3\u0026gt;\u0026lt;strong\u0026gt;About Stripe\u0026lt;/strong\u0026gt;\u0026lt;/h3\u0026gt;\n\u0026lt;p\u0026gt;\u0026lt;span style=\u0026quot;font-weight: 400;\u0026quot;\u0026gt;Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone\u0026#39;s reach while doing the most important work of your career.\u0026lt;/span\u0026gt;\u0026lt;/p\u0026gt;\n\u0026lt;h3\u0026gt;\u0026lt;strong\u0026gt;About the team\u0026lt;/strong\u0026gt;\u0026lt;/h3\u0026gt;\n\u0026lt;p\u0026gt;Stripe MALPB operates in a highly complex, fast-moving regulatory environment. The Risk and Compliance team is responsible for ensuring that our expansion is grounded in a bulletproof governance framework that matches the speed of our technology.\u0026lt;/p\u0026gt;\n\u0026lt;p\u0026gt;Having successfully established our foundational ERM policies, taxonomy, and risk registers, we are entering the integration phase. This team is building the future of \u0026quot;AI-Native\u0026quot; risk management—where governance frameworks are embedded into daily business operations through automated data pipelines, machine learning, and LLM orchestration.\u0026lt;/p\u0026gt;\n\u0026lt;h2\u0026gt;\u0026lt;strong\u0026gt;What you’ll do\u0026lt;/strong\u0026gt;\u0026lt;/h2\u0026gt;\n\u0026lt;p\u0026gt;As the sole dedicated ERM Lead for Stripe MALPB, you will own the enterprise risk program end-to-end. This is a unique hybrid role designed for a technically fluent risk architect.\u0026lt;/p\u0026gt;\n\u0026lt;ul\u0026gt;\n\u0026lt;li\u0026gt;Roughly 1/3rd of your time will be dedicated to ERM Integration and Execution: rolling out our mature risk framework to the First Line (1LoD), running the RCSA cycle, managing the control library, and synthesizing risk scorecards for executive and Board-level reporting.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;Roughly 2/3rds of your time will be dedicated to AI and Control Automation Design: acting as a hands-on developer to build and scale LLM tools, automated evidence-collection scripts, and real-time monitoring workflows that eliminate manual compliance overhead.\u0026lt;/li\u0026gt;\n\u0026lt;/ul\u0026gt;\n\u0026lt;h3\u0026gt;\u0026lt;strong\u0026gt;Responsibilities\u0026lt;/strong\u0026gt;\u0026lt;/h3\u0026gt;\n\u0026lt;h4\u0026gt;\u0026lt;strong\u0026gt;ERM Framework Integration \u0026amp;amp; Execution (1/3rd)\u0026lt;/strong\u0026gt;\u0026lt;/h4\u0026gt;\n\u0026lt;ul\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Enterprise Rollout:\u0026lt;/strong\u0026gt; Drive the cross-functional implementation and adoption of the established ERM framework across all Stripe MALPB business lines and operational functions.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;RCSA Facilitation:\u0026lt;/strong\u0026gt; Execute the annual and semi-annual Risk and Control Self-Assessment (RCSA) cycles, providing robust independent 2LoD challenge to 1LoD risk ratings and control effectiveness.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Control Library \u0026amp;amp; Governance:\u0026lt;/strong\u0026gt; Maintain the Master Control Library, Central Risk Register, and universal Risk Taxonomy, ensuring strict version control, change management, and alignment with emerging threats.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Appetite \u0026amp;amp; KRI Monitoring:\u0026lt;/strong\u0026gt; Aggregate, analyze, and validate Key Risk Indicators (KRIs) against Board-approved Risk Appetite thresholds; trigger formal remediation and Management Action Plans (MAPs) upon breach.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Board \u0026amp;amp; Executive Reporting:\u0026lt;/strong\u0026gt; Synthesize quantitative risk metrics and qualitative horizon scanning into the quarterly Enterprise Risk Scorecard for presentation to the Management Risk Committee and the Board of Directors.\u0026lt;/li\u0026gt;\n\u0026lt;/ul\u0026gt;\n\u0026lt;h4\u0026gt;\u0026lt;strong\u0026gt;AI \u0026amp;amp; Control Automation Design (2/3rd)\u0026lt;/strong\u0026gt;\u0026lt;/h4\u0026gt;\n\u0026lt;ul\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Automated Evidence Collection:\u0026lt;/strong\u0026gt; Design, write, and deploy automated data extraction pipelines (via SQL and APIs) to systematically sample and pull control verification data from core systems.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;LLM Orchestration:\u0026lt;/strong\u0026gt; Build and implement AI/LLM agents to perform semantic analysis on operational logs, policy documents, and compliance records, automatically flagging anomalies or control deficiencies.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;GRC System Engineering:\u0026lt;/strong\u0026gt; Partner with technical teams to optimize and configure our GRC infrastructure, implementing automated self-attestation workflows and removing system bottlenecks.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Continuous Monitoring:\u0026lt;/strong\u0026gt; Transition the bank away from passive, point-in-time testing toward a real-time, automated dashboard environment that monitors key operational and regulatory controls dynamically.\u0026lt;/li\u0026gt;\n\u0026lt;/ul\u0026gt;\n\u0026lt;h2\u0026gt;\u0026lt;strong\u0026gt;Who you are\u0026lt;/strong\u0026gt;\u0026lt;/h2\u0026gt;\n\u0026lt;p\u0026gt;\u0026lt;span style=\u0026quot;font-weight: 400;\u0026quot;\u0026gt;We\u0026#39;re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. We are looking for a rare breed of professional: someone with the executive presence to stand up a banking governance program, combined with the hands-on engineering capabilities to automate it themselves.\u0026amp;nbsp;\u0026amp;nbsp;\u0026lt;br\u0026gt;\u0026lt;/span\u0026gt;\u0026lt;/p\u0026gt;\n\u0026lt;h3\u0026gt;\u0026lt;strong\u0026gt;Minimum requirements\u0026lt;/strong\u0026gt;\u0026lt;/h3\u0026gt;\n\u0026lt;ul\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Experience:\u0026lt;/strong\u0026gt; 8+ years of experience in enterprise risk management, operational risk, or risk advisory within a regulated financial institution, FinTech, or Big 4 tech-risk consultancy.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Execution Track Record:\u0026lt;/strong\u0026gt; Proven experience successfully rolling out and integrating risk programs (RCSAs, KRIs, Control Libraries) into active, fast-paced operational business units.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Technical Proficiency:\u0026lt;/strong\u0026gt; Hands-on experience writing \u0026lt;strong\u0026gt;Python\u0026lt;/strong\u0026gt; and \u0026lt;strong\u0026gt;SQL\u0026lt;/strong\u0026gt; to query databases, manipulate data, and interface with standard web/REST APIs.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;AI/Automation Familiarity:\u0026lt;/strong\u0026gt; Experience using modern LLM APIs, prompt engineering, or low-code/no-code automated workflow engines to analyze unstructured text or automate routine data tasks.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Communication \u0026amp;amp; Presence:\u0026lt;/strong\u0026gt; Exceptional communication skills with a track record of effectively challenging senior business leaders and translating complex risk data into concise, Board-level narratives.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;\u0026lt;strong\u0026gt;Education:\u0026lt;/strong\u0026gt; A Bachelor\u0026#39;s degree in Computer Science, Data Science, Finance, Business, or a related quantitative field.\u0026lt;/li\u0026gt;\n\u0026lt;/ul\u0026gt;\n\u0026lt;h3\u0026gt;\u0026lt;strong\u0026gt;Preferred qualifications\u0026lt;/strong\u0026gt;\u0026lt;/h3\u0026gt;\n\u0026lt;ul\u0026gt;\n\u0026lt;li\u0026gt;Prior experience working in a heavily regulated FinTech environment, digital bank, or complex global payments processor.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;Deep knowledge of GRC software architecture (e.g., ServiceNow, Archer) and how to scale system configurations.\u0026lt;/li\u0026gt;\n\u0026lt;li\u0026gt;Familiarity with international banking risk standards and regulatory expectations (e.g., COSO, ISO 31000, OCC Heightened Standards).\u0026lt;/li\u0026gt;\n\u0026lt;/ul\u0026gt;","departments":[{"id":263177,"name":"4401 Merchant Acquiring Bank - Legal","child_ids":[],"parent_id":80205}],"offices":[{"id":65234,"name":"US","location":null,"child_ids":[89623,249942,249943,230657,61413,80440,344486,83778,61414,83767,83768,83776,83769,83770,83771,83772,83773,83774,89624,83789,83775,83777,83779,83780,83820,83781,83782,83783,83784,83785,83786,83787,83821,83788,83790,83791,83792,83793,83794,83854,83861,83795,83796,83797,83831,83798,83799,83856,83800,83801,83819,83802,83850,83803,83804,83805,83806,83807,83808,83809,83810,83811,83812,83813,83815,83817,83822,83824,83846,83825,83829,83830,65238,83834,83849,83859,83835,83836,83837,83839,83840,83841,83842,83843,83844,83847,83848,83851,83852,83853,83855,83857,83858,83860,83862,83814,83818,83823,83826,83827,83828,83832,83833,83816,85342,83838,83845,223073,265365,16654],"parent_id":673}],"ai_disclaimer":null,"include_ai_disclaimer":false,"ai_opt_out_request_url":"http://app.greenhouse.io/ai_opt_out_request/job_post/7742552/ai_opt_out"}