Enterprise Risk Manager - Business Risk Oversight

Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments grow their revenue and accelerate new business opportunities. Our mission is to increase the GDP of the internet and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

As a regulated business our second line of defence team plays a critical role in assuring the risk and compliance health of Stripe within the broader financial ecosystem.

About the team

We appreciate that growing the GDP of the internet requires leaps into the unknown or untested and being risk-forward while also taking measured and deliberate risks that are aligned with our business objectives and risk appetite. The Global Enterprise Risk Management team helps Stripe to strategically oversee risks working with our business teams to ensure that  risk-mitigating controls are in place enabling our products to develop and scale in a risk-aware manner and managing emerging threats and disruptions to our business.

The Enterprise Risk management team is a globally-distributed team.

What you’ll do

We’re looking for an enterprise risk manager to be part of the Business Risk Oversight team which is one of the pillars in the second line of defence Global Enterprise Risk Management team. The Business Risk Oversight team is responsible for overseeing Stripe’s risks related to its core products and third parties (inclusive of vendors outsourcing relationships and partnerships) with direct impact across the company globally. This team is also responsible for the oversight of the fraud risk strategy and the knock on impact to the wider financial ecosystem.  The successful candidate will help build and scale a global second-line program to oversee these risk areas and partner closely with 1st line of defence fraud strategy product and third-party risk management teams to identify risks lead risk and control self-assessments and support the identification and remediation of incidents and issues in accordance with the global issues management program framework.

This role will need to partner effectively with risk owners and business line leadership to ensure there is sufficient monitoring reporting and governance mechanisms in place to effectively manage a wide range of risks across business. The role holder will also be a key participant in relevant governance fora and will contribute to impactful comprehensive reporting to executive and Board level committees.

Responsibilities

• Play a critical role in the maturity of a second line oversight program including the development key policies standards and processes.

• Develop and sustain a ‘business partner’ relationship with the first line teams in each of these areas and facilitate Risk and Control Self Assessments (RCSAs) with these teams

• Provide advice oversight review and challenge of risk incidents and issues ensuring prompt and robust remediation

• Attend relevant governance meetings at both the global and regional level and report key findings to regional and global leads for inclusion in relevant forums

• Support the creation of a risk and control register in Stripe’s GRC tool in accordance with the requirements of the Global Enterprise Risk Management Program.

• Working with the Compliance teams review track and monitor regulatory changes (relevant to fraud third party and product risks) and any other relevant communications from the regulators partnering with stakeholders to ensure appropriate readiness for new changes.

• In collaboration with business leads ensure we have appropriate business continuity and resiliency plans in place to mitigate our highest risks and meet regulatory requirements.

• Support the development and delivery of necessary training and awareness initiatives

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements you are encouraged to apply. The preferred qualifications are a bonus not a requirement.

Minimum requirements

• At least 5-7 years of work experience executing risk programs and working with third party risk management teams on conducting risk assessments and building out TPRM oversight.

• SME Knowledge of key TRPM Compliance obligations including DORA EBA guidelines on outsourcing etc.

• Experience in developing programs to oversee intercompany and affiliate arrangements across International Regulated Entity Group Structures

• Extensive experience building and managing relationships with internal and external stakeholders with strong influencing skills to drive parties towards an optimal outcome

• A strong team player with the ability to play a key role as a member of the Global Enterprise Risk Management team. Well-versed in the nature of global roles and an ability to operate independently as part of a global risk pillar.

• Knowledge and understanding of effective governance risk management practices risk assessment methodologies and operational risk issues that global fintechs with a wide-range of payments and consumer products face and a growth mind-set to help scale risk initiatives for the future of Stripe

• Excellent communication skills; a demonstrated aptitude for communicating clearly and effectively to a wide array of audiences including senior management Committees Boards.

• A proven ability to develop practical solutions to complex challenges.

• Highly effective organisational and project management skills with a proven track record in meeting deadlines performing under pressure and advancing a number of projects simultaneously

• Strong critical thinking analytical and data skills with keen attention to detail and an ability to transform large and complex data sets into simple and understandable formats including heat maps and trends

Preferred qualifications

• Professional accreditations in risk management