Who we are

About Stripe

Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career.

About the team

The GRC Systems team provides and integrates 3rd party tools that help Governance, Risk and Compliance (GRC) teams detect regulatory changes and orchestrate how policies, risks, controls and audits are managed. These teams ensure that Stripe stays compliant and trusted by users, partners and regulators.

We’re actively pivoting to building GRC systems at Stripe’s scale that bring joy to our users, empowering them to be surprisingly great at assurance. The team is small, nimble and sits right at the intersection of Engineering and Compliance teams. We’re excited to innovate in a space that has stubbornly remained full of toil and friction for decades.

What you’ll do

As a Full Stack Engineer on the GRC Systems team, you’ll be the founding engineer for Stripe’s authoritative GRC System of Record. You will build high quality applications that bridge the gap between our 3rd party toolchain and Stripe’s needs with the explicit goal of evolving these into a self-sufficient platform over time.

You will focus on building software that delivers seamless user experiences, making complex assurance tasks, like assessing technology risk or conducting audits, feel simple and intuitive. This might involve designing and implementing the data models, APIs and services that power critical GRC capabilities, enabling us to aggregate risks from across Stripe and map controls to multiple regulatory frameworks. You will build the integrations that stitch together our ecosystem, automating the flow of data between the GRC tools and internal systems. You will explore using LLMs and agentic AI to improve assurance outcomes in a domain where reproducibility and auditability are non-negotiables.

Responsibilities

• Build, operate and improve purpose-built GRC tools for all internal and external users, from internal risk, compliance and audit teams to external auditors
• Work side-by-side with GRC power users to identify toil and friction, replacing them with intuitive workflows that bring joy to their day-to-day work
• Integrate systems provided by external vendors with internal infrastructure ensuring data flows seamlessly
• Prototype and productionize GenAI features that augment human judgement, such as agents that pre-populate risk assessments or map regulatory changes to controls
• Maintain high standards for code quality, reliability and security ensuring GRC systems are robust and validated to be fit for purpose in assurance activities

Who you are

We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.

Minimum requirements

• Strong technical background, including 4+ years of engineering experience building impactful systems or products
• Enjoy working across a full stack, from designing backend data models and APIs to building intuitive user interfaces, and anything it takes to solve problems and delight users
• You care deeply about the “why” to understand the user’s root problems and solve it elegantly
• Thrive in a new team environment where the roadmap is yours to help define
• Effective at communicating technical concepts to non-technical stakeholders (like Risk and Compliance partners)

Preferred qualifications (if applicable)

• Experience in building internal products and tools
• Interest in GRC or a strong desire to learn this domain
• Prototyped or shipped features using LLMs particularly in compliance domains
• Problem-solving skills, determination, and a growth mindset

It’s not expected that you’ll have deep expertise in every dimension above, but you should be interested in learning any of the areas that are less familiar.