{"version":"0.1","company":{"name":"YubHub","url":"https://yubhub.co","jobsUrl":"https://yubhub.co/jobs/city/us-hybrid/"},"x-facet":{"type":"city","slug":"us-hybrid","display":"Us - Hybrid","count":2},"x-feed-size-limit":100,"x-feed-sort":"enriched_at desc","x-feed-notice":"This feed contains at most 100 jobs (the most recently enriched). For the full corpus, use the paginated /stats/by-facet endpoint or /search.","x-generator":"yubhub-xml-generator","x-rights":"Free to redistribute with attribution: \"Data by YubHub (https://yubhub.co)\"","x-schema":"Each entry in `jobs` follows https://schema.org/JobPosting. YubHub-native raw fields carry `x-` prefix.","jobs":[{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_6d153b52-45b"},"title":"Writer, Content Marketing","description":"<p>We&#39;re looking for an experienced writer to develop data-backed theses and original content pieces about how startups and AI-native businesses launch, monetize, and grow.</p>\n<p>In this role, you&#39;ll collaborate closely with contributors across the product marketing, product, engineering, and demand generation teams to produce compelling content that engages and informs our audience.</p>\n<p><strong>Responsibilities</strong></p>\n<ul>\n<li>Own content covering revenue strategies and pricing models, startups, and new developments in AI, working closely with product marketing to ensure our content reflects the latest industry advances and product news</li>\n<li>Coordinate with the demand generation team to identify opportunities for new editorial series and research agendas</li>\n<li>Pioneer new content formats for Stripe, including short-form content and multimedia projects that grow our audience</li>\n<li>Partner with the data science team and third-party agencies to surface relevant insights for existing and potential customers</li>\n<li>Ensure consistency and tone in messaging across Stripe channels, including blogs, guides, reports, and social-native content</li>\n<li>Manage a pipeline of content, ensuring clear communication and visibility across the organization</li>\n</ul>\n<p><strong>Who you are</strong></p>\n<ul>\n<li>A strong writer with 7+ years of experience in journalism, content marketing, or related fields, ideally with a focus on fintech or emerging technologies</li>\n<li>An analytical thinker who can derive original insights from data and market signals</li>\n<li>Skilled at combining various requests and feedback into a unified message</li>\n<li>A high quality bar for differentiated content</li>\n</ul>\n<p><strong>Preferred qualifications</strong></p>\n<ul>\n<li>Passionate about technology and eager to understand exactly how it works</li>\n<li>Discerning and constructive when giving edits</li>\n<li>Enthusiastic about developing new ways to engage and inform audiences</li>\n<li>Data-driven when making decisions and assessing impact</li>\n<li>Detail-oriented and consistent in your work</li>\n<li>Excited to work in a fast-paced environment where your efforts contribute to a greater goal and align with the company&#39;s mission</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">Job Data by <a href=\"https://yubhub.co\">YubHub</a>.</p>","url":"https://job-boards.greenhouse.io/stripe/jobs/8265686","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Stripe","sameAs":"https://stripe.com","logo":"https://logos.yubhub.co/stripe.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/stripe/jobs/8265686","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["content marketing","journalism","writing","analytical thinking","data analysis"],"x-skills-preferred":["technology","fintech","emerging technologies","data-driven decision making"],"x-benefits":[],"x-licences":[],"x-visa-sponsorship":"unknown","x-visa-sponsorship-text":null,"x-work-authorisation":"unknown","x-work-authorisation-text":null,"datePosted":"2026-10-11T01:56:41.000Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"US Hybrid"}},"employmentType":"FULL_TIME","occupationalCategory":"Marketing","industry":"Finance","skills":"content marketing, journalism, writing, analytical thinking, data analysis, technology, fintech, emerging technologies, data-driven decision making"},{"@context":"https://schema.org","@type":"JobPosting","identifier":{"@type":"PropertyValue","name":"YubHub","value":"job_3cb3b9dd-c3c"},"title":"Security GRC Program Manager, Third Party Risk","description":"<p><strong>Job Description</strong></p>\n<p><strong>Who we are</strong></p>\n<p>Stripe is a financial infrastructure platform for businesses. Millions of companies,from the world&#39;s largest enterprises to the most ambitious startups,use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead.</p>\n<p><strong>About the team</strong></p>\n<p>The Stripe Security team is dedicated to improving the security of Stripe and its users. Our users trust us with some of their most sensitive information, and we make security a first-class consideration in everything we do. Security concerns are ever-evolving, creating an extremely dynamic environment for the Security team.</p>\n<p>The Security Governance, Risk, and Compliance (SGRC) team helps Stripe make informed security decisions, understand its risk and control posture, and represent its security program to internal and external stakeholders. The team also manages security risk arising from Stripe’s relationships with third parties by assessing their security controls, identifying and mitigating risk, and supporting informed onboarding and risk-acceptance decisions. Our work helps Stripe move quickly while maintaining clear and consistent security expectations.</p>\n<p><strong>Responsibilities</strong></p>\n<ul>\n<li>Independently manage a portfolio of Third Party Security Risk Assessments (TPSRAs) for new engagements, renewals / reassessments, and material changes in relationship scope.</li>\n<li>Review security questionnaires, independent assurance reports, certifications, penetration-test results, and other evidence to evaluate third-party control effectiveness.</li>\n<li>Identify security gaps, determine proportionate remediation requirements, and clearly communicate findings to Stripe DRIs and cross-functional partners.</li>\n<li>Apply Stripe’s third-party security standards consistently, documenting assessment results, decisions, and supporting evidence in Zip, Aravo, and other program systems.</li>\n<li>Escalate novel, complex, or high-risk findings and support Enhanced Due Diligence and risk-acceptance processes when a third party cannot meet Stripe’s security requirements.</li>\n<li>Partner with Procurement, Legal, Privacy, Business Continuity, Security, and business stakeholders to resolve assessment issues and support timely third-party onboarding.</li>\n<li>Provide practical guidance to Stripe teams on TPSRA requirements, timelines, and their responsibilities throughout the assessment process.</li>\n<li>Track assessment volume, aging, service levels, remediation status, and other program-health indicators; use the data to identify trends and recommend improvements.</li>\n<li>Identify gaps in program processes, documentation, or tooling and contribute to implementing improvements that increase consistency, scalability, and stakeholder experience.</li>\n<li>Contribute to third-party security risk policies, standards, procedures, and guidance.</li>\n</ul>\n<p><strong>Requirements</strong></p>\n<ul>\n<li>4+ years of relevant experience in third-party security risk, security assessments, information security, or a related risk-management function.</li>\n<li>Experience conducting end-to-end third-party security assessments, including reviewing security documentation, identifying control gaps, determining risk, and defining remediation requirements.</li>\n<li>Working knowledge of common security and assurance frameworks, such as SOC 2, ISO 27001, PCI DSS, NIST, and CSA.</li>\n<li>Sound judgment and analytical skills, including the ability to distinguish material security risks from lower-priority findings and recommend a proportionate response.</li>\n<li>Ability to independently manage multiple assessments, priorities, and stakeholder relationships while meeting defined timelines.</li>\n<li>Clear written and verbal communication skills, including the ability to explain technical security findings to non-security stakeholders.</li>\n<li>Experience using operational data and reporting to identify trends, communicate program health, and improve processes.</li>\n<li>A collaborative approach and experience working with cross-functional partners such as Procurement, Legal, Privacy, and business teams.</li>\n</ul>\n<p><strong>Nice to have</strong></p>\n<ul>\n<li>Experience with third-party risk management platforms or procurement workflow tools such as Aravo, Zip, or similar systems.</li>\n<li>Experience with Enhanced Due Diligence, security risk acceptance, or third-party incident response.</li>\n<li>Experience improving or scaling a third-party risk assessment program</li>\n</ul>\n<p style=\"margin-top:24px;font-size:13px;color:#666;\">Job Data by <a href=\"https://yubhub.co\">YubHub</a>.</p>","url":"https://job-boards.greenhouse.io/stripe/jobs/8241288","directApply":true,"hiringOrganization":{"@type":"Organization","name":"Stripe","sameAs":"https://stripe.com","logo":"https://logos.yubhub.co/stripe.com.png"},"x-apply-url":"https://job-boards.greenhouse.io/stripe/jobs/8241288","x-work-arrangement":"hybrid","x-experience-level":"senior","x-job-type":"full-time","x-salary-range":null,"x-skills-required":["third-party security risk","security assessments","information security","risk-management","SOC 2","ISO 27001","PCI DSS","NIST","CSA"],"x-skills-preferred":["third-party risk management platforms","procurement workflow tools","Aravo","Zip","Enhanced Due Diligence","security risk acceptance","third-party incident response"],"x-benefits":[],"x-licences":[],"x-visa-sponsorship":"unknown","x-visa-sponsorship-text":null,"x-work-authorisation":"unknown","x-work-authorisation-text":null,"datePosted":"2026-10-06T10:58:35.000Z","jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"US - Hybrid"}},"employmentType":"FULL_TIME","occupationalCategory":"IT","industry":"Technology","skills":"third-party security risk, security assessments, information security, risk-management, SOC 2, ISO 27001, PCI DSS, NIST, CSA, third-party risk management platforms, procurement workflow tools, Aravo, Zip, Enhanced Due Diligence, security risk acceptance, third-party incident response"}]}