Director of Enterprise Risk Management

About Upstart At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence. As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress. We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you. If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you. The Team: Upstart’s Risk team is hiring to enhance its second line of defense function in support of its application to establish a national bank. The Risk team is responsible for Upstart’s enterprise risk management program and risk governance, as well as for providing independent oversight and credible challenge across the following risk categories: operational risk, treasury risk (including liquidity risk, interest rate risk, price risk, and capital management), and operational risk. We partner with first-line business functions, senior and executive leadership, and the board of directors to ensure effective identification and assessment, measurement, monitoring and reporting, and response and control for all core risk types and in alignment with regulatory expectations. Upstart is hiring a Director, Enterprise Risk Management to lead and grow the Risk team’s ERM function for Upstart Bank. This role will establish, maintain, and continually enhance the bank’s ERM program and framework, including: management and maintenance of the risk appetite statement and other ERM program governing documents; ownership of risk assessment processes and methodologies; collection and monitoring of risk metrics; coordination of all risk governance activities, including aggregated management and board risk reporting. Additionally, this role will oversee the operational risk team responsible for conducting ongoing risk and control assessments across the bank’s operations. This includes establishing an operational risk program framework and risk assessment schedule, recommending actions to mitigate operational risk, and producing risk reporting and insights on the bank’s aggregated operational risk profile, trends, and high-risk areas. This role will manage the ERM Program and Operational Risk teams,and will be responsible for building out existing risk infrastructureand processes to meet rigorous expectations of a nationally chartered bank,inclusive hiring additional roles to expand existing team capacity.As a senior member ofthe Risk organization,this role works collaborativelywith internal leaders across all three linesof defense,and will serve as a primary pointof contact for managementas well as external stakeholders suchas bank examiners on matters related tothe bank’s ERMand OperationalRisk programs,includinduringthe charter application process. How you’ll make an impact Defineand maintainthe Bank's enterpriserisk management framework,includinrisk appetite statement,risk assessment methodology,and aggregatedrisk reportingLeadthe ERM Programteamin executingenterpriserisk assessments;maintainingriskand controlinventoriesand gaptracking;and measuringrisk quantitativelyvia keyrisk indicatorsforallrisk categoriesEnsureconsistent quantitativeand qualitative risk identification, assessment,and measurement methodologiesDirectthe team'sworkonrisk committeeandboard reporting, policy management,and ERM programmaintenanceandexecutionDirectthe OperationalRisk Programactivities, ensuring consistentassessment methodologyis appliedacrossallproduct linesand providing actionableanalysisand insights onhighrisk areasrequiring actionServeasa seniorpointof escalationand relationshipmanagerforexternal stakeholdersincludingOCC examiners, internalandexternal auditors, capital markets partners,and lending partnersDevelop, manage,and hireforERMPogramandOperationalRiskProgramteams Minimum Qualifications Bachelor's degree or equivalent practical experience10+ years experiencein enterpriserisk managementin bankingor financialservicesDemonstrated experiencebuildingor leadingan enterpriserisk managementprogram,includinrisk frameworkdevelopment,risk assessmentmethodology, quantitative risk measurement,andrisk governanceDirect experienceworkingwith OCC,Federal Reserveor other federalbankingregulatorexaminationprocesses Preferred Qualifications Advanced degree(MBA, JDor equivalent)or professionalrisk certificationExperienceat ade novo bank, bank holding company, or OCC-regulated institutionearly stage build-outExperienceleadingcross-functional riskteamsacrossmultiple domainsFamiliaritywith OCC Comptroller's Handbookstandardsfor ERM, operationalrisk, governanceStrong quantitative skills:risk data aggregation,keyrisk indicator(KRI) design,GRC toolmanagementExperiencepresentingto board-level committeesorsenior leadershiponrisk programs/results Skills Mentioned:

• Enterprise Risk Management program development
• Risk appetite statement management
• Risk assessment methodologies(qualitative & quantitative)
• Quantitative risk measurement & keyrisk indicators(KRIs)
• Risk governance & reportingto board/executive leadership
• OperationalRisk program framework & assessments
• Collaboration across first/second/third linesof defense
• Regulatory examinationprocesses(OCC/Federal Reserve)
• Data aggregation & GovernanceRisk Compliance(GRC) tools
• Leadership & team building/hiring

Compensation & Benefits: Base salary range: $18, 900—$334, 200 USD dependingon locationand experienceAdditional compensation:target bonuses,equity compensationBenefits include: Competitive pay & annual equity grants vesting quarterlyGenerous401(k) planwith $2 match per $1 contributedup to $15k/yearEmployee Stock Purchase Plan(ESPP)Medical/dental/vision coveragewith90%-100% employer coveragedependingon planHealth Savings Account contributionsIncome protection benefitsincluding life insurance& disability coveragePaid time off including sick/safe time& holidaysPaid family& parental leaveFamily-centered benefits supporting fertility/parenthood/caregivingEmployee Assistance Programfor mental health supportFinancial wellness resources& concierge serviceAnnual wellness allowancefor physical/emotional well-being/personal developmentAnnual productivity allowancefor tools/resources neededfor remote workTeam events,onsite perks at officesin Bay Area,AustinColumbusNYC(opening2026)

LI_REMOTE #LI_Director tags indicate remote work eligibilityand director level position.Equal Opportunity Employer statement included.Reasonable accommodations available upon request.