Enterprise Risk Manager, Business Risk Oversight
Stripe
Who we are
About Stripe
Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.
As a regulated business, our second line of defence team plays a critical role in assuring the risk and compliance health of Stripe within the broader financial ecosystem.
About the team
We appreciate that growing the GDP of the internet requires leaps into the unknown or untested and being risk-forward, while also taking measured and deliberate risks that are aligned with our business objectives and risk appetite. The Global Enterprise Risk Management team helps Stripe to strategically oversee risks, working with our business teams to ensure that risk-mitigating controls are in place, enabling our products to develop and scale in a risk-aware manner and managing emerging threats and disruptions to our business.
The Enterprise Risk management team is a globally-distributed team.
What you’ll do
We’re looking for an enterprise risk manager to be part of the Business Risk Oversight team, which is one of the pillars in the second line of defence Global Enterprise Risk Management team. The Business Risk Oversight team is responsible for overseeing Stripe’s risks related to its core products and third parties (inclusive of vendors, outsourcing relationships and partnerships), with direct impact across the company globally. This team is also responsible for the oversight of the fraud risk strategy and the knock on impact to the wider financial ecosystem. The successful candidate will help build and scale a global second-line program to oversee these risk areas and partner closely with 1st line of defence fraud strategy, product and third-party risk management teams to identify risks, lead risk and control self-assessments and support the identification and remediation of incidents and issues in accordance with the global issues management program framework.
This role will need to partner effectively with risk owners and business line leadership to ensure there is sufficient monitoring, reporting and governance mechanisms in place to effectively manage a wide range of risks across business. The role holder will also be a key participant in relevant governance fora and will contribute to impactful, comprehensive reporting to executive and Board level committees.
Responsibilities
- Play a critical role in the maturity of a second line oversight program, including the development key policies, standards and processes.
- Develop and sustain a ‘business partner’ relationship with the first line teams in each of these areas and facilitate Risk and Control Self Assessments (RCSAs) with these teams
- Provide advice, oversight, review and challenge of risk incidents and issues, ensuring prompt and robust remediation
- Attend relevant governance meetings at both the global and regional level and report key findings to regional and global leads for inclusion in relevant forums
- Support the creation of a risk and control register in Stripe’s GRC tool in accordance with the requirements of the Global Enterprise Risk Management Program.
- Working with the Compliance teams, review, track and monitor regulatory changes (relevant to fraud, third party and product risks) and any other relevant communications from the regulators, partnering with stakeholders to ensure appropriate readiness for new changes.
- In collaboration with business leads, ensure we have appropriate business continuity and resiliency plans in place to mitigate our highest risks and meet regulatory requirements.
- Support the development and delivery of necessary training and awareness initiatives
Who you are
We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
Minimum requirements
- At least 5-7 years of work experience executing risk programs and working with third party risk management teams on conducting risk assessments and building out TPRM oversight.
- SME Knowledge of key TRPM Compliance obligations including DORA, EBA guidelines on outsourcing etc.
- Experience in developing programs to oversee intercompany and affiliate arrangements across International Regulated Entity Group Structures
- Extensive experience building and managing relationships with internal and external stakeholders with strong influencing skills to drive parties towards an optimal outcome
- A strong team player, with the ability to play a key role as a member of the Global Enterprise Risk Management team. Well-versed in the nature of global roles and an ability to operate independently as part of a global risk pillar.
- Knowledge and understanding of effective governance, risk management practices, risk assessment methodologies, and operational risk issues that global fintechs with a wide-range of payments and consumer products face, and a growth mind-set to help scale risk initiatives for the future of Stripe
- Excellent communication skills; a demonstrated aptitude for communicating clearly and effectively to a wide array of audiences, including senior management, Committees, Boards.
- A proven ability to develop practical solutions to complex challenges.
- Highly effective organisational and project management skills, with a proven track record in meeting deadlines, performing under pressure, and advancing a number of projects simultaneously
- Strong critical thinking, analytical, and data skills, with keen attention to detail, and an ability to transform large and complex data sets into simple and understandable formats, including heat maps and trends
Preferred qualifications
- Professional accreditations in risk management
This role is available either in an office or a remote location (typically, 35+ miles or 56+ km from a Stripe office).
Office-assigned Stripes spend at least 50% of the time in a given month in their local office or with users. This hits a balance between bringing people together for in-person collaboration and learning from each other, while supporting flexibility about how to do this in a way that makes sense for individuals and their teams.
A remote location, in most cases, is defined as being 35 miles (56 kilometers) or more from one of our offices. While you would be welcome to come into the office for team/business meetings, on-sites, meet-ups, and events, our expectation is you would regularly work from home rather than a Stripe office. Stripe does not cover the cost of relocating to a remote location. We encourage you to apply for roles that match the location where you currently or plan to live.
The annual salary range for this role in the primary location is C$122,400 - C$183,600. This range may change if you are hired in another location. For sales roles, the range provided is the role’s On Target Earnings (“OTE”) range, meaning that the range includes both the sales commissions/sales bonuses target and annual base salary for the role. This salary range may be inclusive of several career levels at Stripe and will be narrowed during the interview process based on a number of factors, including the candidate’s experience, qualifications, and specific location. Applicants interested in this role and who are not located in the primary location may request the annual salary range for their location during the interview process.
Specific benefits and details about what compensation is included in the salary range listed above will vary depending on the applicant’s location and can be discussed in more detail during the interview process. Benefits/additional compensation for this role may include: equity, company bonus or sales commissions/bonuses; retirement plans; health benefits; and wellness stipends.
Office locations
Toronto
Remote locations
Remote in Canada
Team
Legal
Job type
Full time