Senior Risk Associate, Upstart

• 3+ years of experience in risk management, third-party risk, audit, or compliance
• Experience performing supplier risk assessments or control evaluations
• Familiarity with regulatory expectations (e.g., OCC, FDIC, CFPB,Interagency Guidance on Third-Party Relationships: Risk Management ) or industry frameworks (e.g., NIST, other relevant frameworks)
• Experience working with risk management tools or vendor management systems (e.g., Zip, Kobalt, ProcessUnity, Archer, ServiceNow)
• Experience managing supplier risk and performance in collaboration with internal business stakeholders and suppliers

Desirable

• Upstart’s Third Party Risk Management (TPRM) team ensures that third-party relationships are identified, assessed, monitored, and governed in alignment with regulatory expectations, interagency guidance, and company risk appetite
• The team partners cross-functionally to enable safe, scalable supplier usage while strengthening operational resilience
• As a Contractor on the TPRM team, you will execute third-party supplier due diligence, risk assessments, control effectiveness, and support ongoing monitoring activities
• You will operate with moderate independence, use AI-driven tooling, apply risk based judgment, and collaborate with business and other risk stakeholders to ensure supplier risks are appropriately managed
• This is a 6-week assignment with the chance to extend
• Conduct third-party supplier risk assessments across due diligence, onboarding, and ongoing monitoring
• Analyze supplier controls, security posture, and business continuity capabilities to identify risk gaps
• Partner with internal stakeholders to communicate risk findings and recommend mitigation strategies
• Support issue tracking, remediation validation, and escalation of third-party risks
• Maintain accurate documentation and reporting to support audits, exams, and regulatory requirements