Principal Program Manager, Tech Risk (BC/DR)

About the role

The Principal Program Manager, Business Continuity & Disaster Recovery will lead Upstart’s business continuity and disaster recovery program, inheriting and maturing existing foundations including business continuity policy, disaster recovery planning, and business impact analysis processes. They will help build the program toward bank-grade operational resilience standards while ensuring critical business operations and technology services can effectively respond to and recover from disruptive events.

Responsibilities

• Lead the enterprise business continuity and disaster recovery program strategy, execution, governance, and ongoing maturity efforts.
• Own and mature the business impact analysis process, including critical business process identification, dependency mapping, ownership assignment, risk-rating methodology, and recovery strategy development.
• Develop and maintain business continuity plans, disaster recovery plans, crisis management processes, and supporting documentation for critical business and technology functions.
• Drive cross-functional execution across Technology, Security, Office Operations, Vendor Management, Enterprise Risk Management, Compliance, and business process owners to ensure continuity and recovery plans are actionable, tested, and maintained.
• Coordinate disaster recovery exercises, tabletop tests, remediation tracking, and evidence collection to improve organizational preparedness and support audit or regulatory expectations.
• Maintain and improve program repositories, workflows, and reporting, including business impact analysis records, recovery plans, testing evidence, program metrics, and remediation status.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Business, Risk Management, or a related field, or equivalent practical experience, plus 8 years of experience in business continuity, disaster recovery, operational resilience, information security, risk management, or program management.
• 8+ years of experience leading or materially maturing business continuity, disaster recovery, or operational resilience programs.
• Experience designing or maturing business continuity, disaster recovery, or operational resilience programs in a bank, fintech, lending, or other regulated financial services environment.
• Experience conducting business impact analyses, recovery planning, dependency mapping, resilience testing, and remediation tracking.
• Experience implementing or operating against business continuity, disaster recovery, or operational resilience frameworks or standards such as ISO 22301, NIST, FFIEC, or equivalent regulatory guidance.

Preferred Qualifications

• Knowledge of technology resilience concepts, including cloud infrastructure resilience, service outages, incident response coordination, system dependencies, and vendor recovery planning.
• Experience supporting audits, regulatory reviews, or compliance initiatives related to business continuity, disaster recovery, or operational resilience.
• Skilled in developing scalable operational processes, program governance models, documentation repositories, and executive-level reporting.
• Ability to communicate resilience risks, recovery strategies, and program priorities to technical and non-technical stakeholders.
• Professional certifications such as CBCP, CISSP, CISM, CRISC, or related business continuity, security, or risk certifications.

Position location

This role is available in the following locations: Remote

Travel requirements

The majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S. but are encouraged to spend high quality time in-person collaborating via regular onsites. The in-person sessions' cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

What you'll love

At Upstart, our benefits are designed to support your health, financial well-being, family, and personal growth. Here’s what you can expect:

• Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly
• Retirement benefits to help you plan for the future, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada)
• Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only)
• Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada.
• Health Savings Account contributions from Upstart for eligible plans (US only)
• Income protection benefits, including life insurance and disability coverage for added financial security
• Paid time off, sick leave, and company holidays, in line with local requirements
• Paid family and parental leave to support caregiving and major life moments (duration varies by country)
• Family-centered benefits to support fertility, parenthood, and caregiving needs
• Employee Assistance Program (EAP) offering mental health support and life-centered resources
• Financial wellness resources, including access to financial planning tools and a financial concierge service (US Only)
• Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you
• Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from
• Connection and community through team events, all-company updates, and employee resource groups (ERGs)
• Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our offices in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!)!