Remote Senior Associate, Third-Party Risk & Compliance

OhioX; Austin, San Francisco, New York (TX, CA, NY); A distancia; USD 91.000 - 145.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity grants (annual)

401(k) match

ESPP

Health coverage

Paid time off

Wellness allowances

Descripción de la vacante

Upstart is seeking a Remote Senior Associate for Third-Party Risk Management (TPRM) to assess supplier risks and support the growth of the TPRM program. You will perform risk assessments, address control gaps, and help improve processes with automation and AI-enabled solutions.

You will collaborate with Legal, Compliance, Information Security, and Procurement teams while maintaining documentation and supporting regulatory examinations.

Formación

• 2+ years in third-party risk management, enterprise risk management, compliance, or audit.
• Experience conducting risk assessments and documenting findings.
• Experience evaluating control effectiveness and identifying gaps.
• Experience documenting remediation actions for deficiencies.
• Experience using vendor management or GRC platforms.

Responsabilidades

• Execute third-party risk assessments across the supplier lifecycle.
• Evaluate supplier controls and identify remediation actions.
• Collaborate with Legal, Compliance, InfoSec, Procurement and Risk teams.
• Improve frameworks, methods, workflows, and reporting with guidance.
• Support regulatory exams, audits, and remediation activities.
• Use risk platforms and AI-enabled tools with appropriate human oversight.

Conocimientos

Third-party risk mgmt

Risk assessments

Control evaluation

Remediation actions

GRC platforms

Herramientas

GRC platforms

Descripción del empleo

Upstart is seeking a Remote Senior Associate for Third-Party Risk Management (TPRM) to assess supplier risks and support the growth of the TPRM program. You will perform risk assessments, address control gaps, and help improve processes with automation and AI-enabled solutions.

You will collaborate with Legal, Compliance, Information Security, and Procurement teams while maintaining documentation and supporting regulatory examinations.