Manager, Third Party Risk Management

About the role

The Manager, Third Party Risk Management leads the execution of Upstart's third-party risk management program. This includes overseeing risk assessments, due diligence, ongoing monitoring, and vendor oversight activities. They also manage and develop the Third-Party Risk Management team, ensuring consistent, high-quality risk assessments and oversight activities. Additionally, they serve as the primary second-line escalation point for elevated or complex third-party risk matters.

Responsibilities

• Lead execution of the bank’s end-to-end third-party risk management program, including risk-tiered due diligence, onboarding risk assessments, ongoing monitoring, and offboarding activities across all vendor tiers.
• Manage and develop the Third-Party Risk Management team by setting priorities, providing coaching, and ensuring consistent, high-quality risk assessments and oversight activities.
• Serve as the primary second-line escalation point for elevated or complex third-party risk matters, providing risk-based recommendations and ensuring issues are appropriately documented, tracked, and resolved.
• Maintain and enhance third-party risk management frameworks, risk tiering methodologies, assessment templates, and governance processes to support a scalable, risk-based program.
• Partner with Legal, Compliance, Information Security, Affiliate Risk, and business stakeholders to ensure consistent application of third-party risk standards throughout the vendor lifecycle.
• Lead regulatory examination readiness and support responses to OCC, FDIC, internal audit, and external audit inquiries related to third-party risk management.

Requirements

• Bachelor’s degree or equivalent practical experience.
• 6+ years of experience in third-party risk management, compliance, audit, operational risk, or a related risk discipline within a banking or financial services environment.
• Experience leading a third-party risk management program, including risk assessments, due diligence reviews, ongoing monitoring, and issue management across a multi-vendor portfolio.
• Knowledge of OCC, FDIC, and interagency guidance related to third-party relationships and risk management, including the 2023 Interagency Guidance on Third-Party Relationships: Risk Management.
• Experience assessing and managing risks associated with multiple third-party relationship types, including suppliers, lending partners, affiliates, and technology service providers.

Qualifications

• Direct experience supporting OCC or FDIC regulatory examinations related to third-party risk management.
• Experience leading or developing risk, compliance, audit, or third-party risk professionals.
• Knowledge of affiliate risk oversight requirements, including Regulation W and related regulatory expectations.
• Experience operating within a fintech, digital banking, or technology-intensive environment, including oversight of cloud, SaaS, and other technology service providers.
• Experience using governance, risk, and compliance (GRC) platforms to support third-party risk assessments, issue management, workflow automation, and ongoing monitoring activities.

Skills

• Strong leadership and team management skills.
• Proven ability to manage and mentor a team.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaboratively.
• Strong analytical and problem-solving skills.
• Experience with regulatory compliance and risk management frameworks.
• Knowledge of GRC platforms and tools.

Benefits

• Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly.
• Retirement benefits, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada).
• Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only).
• Comprehensive health coverage, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada.
• Health Savings Account contributions from Upstart for eligible plans (US only).
• Income protection benefits, including life insurance and disability coverage for added financial security.
• Paid time off, sick leave, and company holidays, in line with local requirements.
• Paid family and parental leave to support caregiving and major life moments (duration varies by country).
• Family-centered benefits to support fertility, parenthood, and caregiving needs.
• Employee Assistance Program (EAP) offering mental health support and life-centered resources.
• Financial wellness resources, including access to financial planning tools and a financial concierge service (US Only).
• Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you.
• Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from.
• Connection and community through team events, all-company updates, and employee resource groups (ERGs).
• Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our offices in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!)!