Enterprise Risk Management (ERM) Program & Automation Lead, MALPB

h2 strong Who we are /strong /h2

h3 strong About Stripe /strong /h3

p span style= font-weight: 400; Stripe is a financial infrastructure platform for businesses. Millions of companies - from the world’s largest enterprises to the most ambitious startups - use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone's reach while doing the most important work of your career. /span /p

h3 strong About the team /strong /h3

p Stripe MALPB operates in a highly complex, fast-moving regulatory environment. The Risk and Compliance team is responsible for ensuring that our expansion is grounded in a bulletproof governance framework that matches the speed of our technology. /p

p Having successfully established our foundational ERM policies, taxonomy, and risk registers, we are entering the integration phase. This team is building the future of AI-Native risk management—where governance frameworks are embedded into daily business operations through automated data pipelines, machine learning, and LLM orchestration. /p

h2 strong What you’ll do /strong /h2

p As the sole dedicated ERM Lead for Stripe MALPB, you will own the enterprise risk program end-to-end. This is a unique hybrid role designed for a technically fluent risk architect. /p

ul

li Roughly 1/3rd of your time will be dedicated to ERM Integration and Execution: rolling out our mature risk framework to the First Line (1LoD), running the RCSA cycle, managing the control library, and synthesizing risk scorecards for executive and Board-level reporting. /li

li Roughly 2/3rds of your time will be dedicated to AI and Control Automation Design: acting as a hands-on developer to build and scale LLM tools, automated evidence-collection scripts, and real-time monitoring workflows that eliminate manual compliance overhead. /li

/ul

h3 strong Responsibilities /strong /h3

h4 strong ERM Framework Integration Execution (1/3rd) /strong /h4

ul

li strong Enterprise Rollout: /strong Drive the cross-functional implementation and adoption of the established ERM framework across all Stripe MALPB business lines and operational functions. /li

li strong RCSA Facilitation: /strong Execute the annual and semi-annual Risk and Control Self-Assessment (RCSA) cycles, providing robust independent 2LoD challenge to 1LoD risk ratings and control effectiveness. /li

li strong Control Library Governance: /strong Maintain the Master Control Library, Central Risk Register, and universal Risk Taxonomy, ensuring strict version control, change management, and alignment with emerging threats. /li

li strong Appetite KRI Monitoring: /strong Aggregate, analyze, and validate Key Risk Indicators (KRIs) against Board-approved Risk Appetite thresholds; trigger formal remediation and Management Action Plans (MAPs) upon breach. /li

li strong Board Executive Reporting: /strong Synthesize quantitative risk metrics and qualitative horizon scanning into the quarterly Enterprise Risk Scorecard for presentation to the Management Risk Committee and the Board of Directors. /li

/ul

h4 strong AI Control Automation Design (2/3rd) /strong /h4

ul

li strong Automated Evidence Collection: /strong Design, write, and deploy automated data extraction pipelines (via SQL and APIs) to systematically sample and pull control verification data from core systems. /li

li strong LLM Orchestration: /strong Build and implement AI/LLM agents to perform semantic analysis on operational logs, policy documents, and compliance records, automatically flagging anomalies or control deficiencies. /li

li strong GRC System Engineering: /strong Partner with technical teams to optimize and configure our GRC infrastructure, implementing automated self-attestation workflows and removing system bottlenecks. /li

li strong Continuous Monitoring: /strong Transition the bank away from passive, point-in-time testing toward a real-time, automated dashboard environment that monitors key operational and regulatory controls dynamically. /li

/ul

h2 strong Who you are /strong /h2

p span style= font-weight: 400; We're looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement. We are looking for a rare breed of professional: someone with the executive presence to stand up a banking governance program, combined with the hands-on engineering capabilities to automate it themselves. br /span /p

h3 strong Minimum requirements /strong /h3

ul

li strong Experience: /strong 8+ years of experience in enterprise risk management, operational risk, or risk advisory within a regulated financial institution, FinTech, or Big 4 tech-risk consultancy. /li

li strong Execution Track Record: /strong Proven experience successfully rolling out and integrating risk programs (RCSAs, KRIs, Control Libraries) into active, fast-paced operational business units. /li

li strong Technical Proficiency: /strong Hands-on experience writing strong Python /strong and strong SQL /strong to query databases, manipulate data, and interface with standard web/REST APIs. /li

li strong AI/Automation Familiarity: /strong Experience using modern LLM APIs, prompt engineering, or low-code/no-code automated workflow engines to analyze unstructured text or automate routine data tasks. /li

li strong Communication Presence: /strong Exceptional communication skills with a track record of effectively challenging senior business leaders and translating complex risk data into concise, Board-level narratives. /li

li strong Education: /strong A Bachelor's degree in Computer Science, Data Science, Finance, Business, or a related quantitative field. /li

/ul

h3 strong Preferred qualifications /strong /h3

ul

li Prior experience working in a heavily regulated FinTech environment, digital bank, or complex global payments processor. /li

li Deep knowledge of GRC software architecture (e.g., ServiceNow, Archer) and how to scale system configurations. /li

li Familiarity with international banking risk standards and regulatory expectations (e.g., COSO, ISO 31000, OCC Heightened Standards). /li

/ul