Remote Senior Associate, Third-Party Risk Management

Upstart; United States; Remote; USD 91,000 - 145,000; Full time

Benefits offered by this job

401(k) match

ESPP

Health coverage

Paid time off

Remote work

Job summary

Upstart is seeking a Remote Senior Associate for Third-Party Risk Management (TPRM) to assess and manage supplier risks while supporting the TPRM program’s evolution. You will conduct risk assessments, coordinate with cross-functional teams, and help enhance controls and oversight with AI-enabled solutions.

Responsibilities include onboarding, ongoing monitoring, reporting, and remediation coordination across Legal, Compliance, and Information Security.

Qualifications

• 2+ years of experience in third-party risk management, enterprise risk management, compliance, or audit.
• Experience conducting risk assessments and documenting findings.
• Experience evaluating control effectiveness and identifying risk or control gaps.
• Experience using GRC platforms to support risk assessments and monitoring.
• Experience supporting regulatory examinations or audits.

Responsibilities

• Execute third-party risk assessments throughout the supplier lifecycle, including onboarding and ongoing monitoring.
• Evaluate supplier controls across multiple risk domains and identify remediation actions.
• Collaborate with Legal, Compliance, Information Security, Procurement, and business teams to communicate findings.
• Identify opportunities to improve TPRM frameworks, methodologies, workflows, and reporting.
• Support regulatory examinations, internal audits, and remediation activities with documentation.
• Use third-party risk platforms and AI-enabled tools to improve assessment efficiency and maintain human oversight.

Skills

Third-party risk management

Risk assessments

Regulatory compliance

Issue remediation

GRC platforms

Tools

GRC platforms

AI-enabled tools

Automation tools

Job description

Upstart is seeking a Remote Senior Associate for Third-Party Risk Management (TPRM) to assess and manage supplier risks while supporting the TPRM program’s evolution. You will conduct risk assessments, coordinate with cross-functional teams, and help enhance controls and oversight with AI-enabled solutions.

Responsibilities include onboarding, ongoing monitoring, reporting, and remediation coordination across Legal, Compliance, and Information Security.