About Upstart At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence. As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress. We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you. If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you. The Team: Upstart’s Risk team is building its second line of defense function in support of its application to establish Upstart Bank, N.A., a de novo national bank. The team is responsible for Upstart’s enterprise risk management program and risk governance, providing independent oversight and credible challenge across key risk categories including operational risk, third-party risk, technology and information security risk, treasury risk, and compliance risk. The Risk team partners closely with business leaders, executive management, and the Board to ensure material risks are effectively identified, assessed, monitored, and governed in alignment with OCC, FDIC, and interagency regulatory expectations. As the Manager, Third Party Risk Management at Upstart:

• Lead the day-to-day execution of the bank’s third-party risk management program and oversee a team responsible for risk assessments, due diligence, ongoing monitoring, and vendor oversight activities.
• Play a key role in ensuring the program remains scalable, exam-ready, and aligned with evolving regulatory expectations while supporting the growth of Upstart Bank.

How you’ll make an impact:

• Lead execution of the bank’s end-to-end third-party risk management program including risk-tiered due diligence, onboarding risk assessments, ongoing monitoring, offboarding activities across all vendor tiers.
• Manage and develop the Third-Party Risk Management team by setting priorities, providing coaching ensuring consistent high-quality risk assessments & oversight activities.
• Serve as primary second-line escalation point for elevated or complex third-party risk matters providing risk-based recommendations ensuring issues are documented/tracked/resolved.
• Maintain/enhance third-party risk management frameworks/risk tiering methodologies/assessment templates/governance processes supporting scalable/risk-based program.
• Partner with Legal/Compliance/Information Security/Affiliate Risk/business stakeholders ensuring consistent application of third-party risk standards throughout vendor lifecycle.
• Lead regulatory examination readiness/support responses to OCC/FDIC/internal audit/external audit inquiries related to third-party risk management.

Minimum Qualifications:

• Bachelor’s degree or equivalent practical experience.
• 6+ years experience in third-party risk management/compliance/audit/operational risk/related discipline within banking or financial services environment.
• Experience leading third-party risk management program including risk assessments/due diligence reviews/ongoing monitoring/issue management across multi-vendor portfolio.
• Knowledge of OCC/FDIC/interagency guidance related to third-party relationships & risk management including 2023 Interagency Guidance on Third-Party Relationships: Risk Management.
• Experience assessing/managing risks associated with multiple third-party relationship types including suppliers/lending partners/affiliates/technology service providers.

Preferred Qualifications:

• Direct experience supporting OCC or FDIC regulatory examinations related to third-party risk management.
• Experience leading/developing risk/compliance/audit/third-party risk professionals.
• Knowledge of affiliate risk oversight requirements including Regulation W & related regulatory expectations.
• Experience operating within fintech/digital banking/technology-intensive environment including oversight of cloud/SaaS/other technology service providers.
• Experience using governance/risk/compliance (GRC) platforms supporting third-party risk assessments/issue management/workflow automation/ongoing monitoring activities.

Position Location: Remote Remote Work Mention: This role is available Remote; as a digital first company majority work can be accomplished remotely; employees can live/work anywhere in U.S but encouraged to spend high quality time in-person collaborating via regular onsites; onsite cadence varies by team & role; most teams meet once or twice per quarter for 2–4 consecutive days at a time.