Third Party Risk Manager

Augustus; New York (NY); On-site; USD 150,000 - 250,000; Full time

Benefits offered by this job

Relocation support

Visa support

MacBook + AirPods

Lunch benefit

Gym benefit

Office in the heart of the city

4x on-/offsites per year

Annual development budget

Job summary

Augustus in New York City is hiring for a TPRM Program Lead who will own vendor risk management, onboarding, and ongoing due diligence across multiple functions. You will coordinate SME reviews, track BCDR/exit plans, and manage the issues log while extending diligence to critical fourth parties.

This is a high-ownership operational role in a growth-stage fintech with strong governance requirements. You will lead inventory reconciliation, onboarding, and quarterly reconciliation, ensuring timely

Qualifications

• Several years of experience in third-party/vendor risk management, procurement risk, compliance, or a related operational/governance function.
• Strong organizational and documentation skills — inventories, DDQs, and trackers stay accurate under you.
• Working knowledge of third-party risk concepts including due diligence tiering, BCDR/RTO/RPO, SLA monitoring, and issues management.
• Comfortable working with Excel/spreadsheets; experience with GRC or TPRM platforms is a plus.
• In New York City, or ready to relocate.

Responsibilities

• Own the mechanics that make the TPRM program run day to day: vendor inventory reconciliation, onboarding, and due diligence tracking.
• Coordinate SME reviews across IT, Information Security, BSA/AML & OFAC, Compliance, Credit, Finance, and Legal.
• Track BCDR posture, vendor exit plans, and maintain the TPRM issues log from identification to closure.
• Extend due diligence downstream to critical fourth parties where required.
• Administer and track DDQs for vendor and partner relationships.
• Monitor SLA performance and ensure timely responses from vendors and partners.

Skills

Vendor risk management

Due diligence

Documentation

Excel

GRC/TPRM platforms

Stakeholder coordination

Tools

GRC/TPRM platforms

Job description

Few people get to build a bank from scratch. Even fewer get to build one at a moment when banking itself is being reinvented.

The Dollar is the best product in the history of the world - there is infinite global demand. But International Fintechs and non-US banks are left with two unsatisfying options to access it: Either they build on legacy clearing banks that are slow and unreliable, or they interface with middleware providers that don’t move and hold the dollars directly, but themselves rely on underlying legacy banks. Augustus collapses this stack by combining two things: A real, national bank charter (in organization), and Marble, our proprietary core banking system, built around intelligence, made of code.

We are a group of operators, unicorn early employees, ex-founders and people who walked away from degrees because they believe this is an industry and career defining opportunity. We are backed with more than $200M from Peter Thiel's Valar Ventures, Tiger Global, Hummingbird, QED, Creandum, and the founders of Nubank, Ramp, Deel, Circle, Fluidstack, Fuse, and n8n.

We are regulated in Europe and live with Euro and Stablecoin clearing today. Now, we are building the US team from the ground up, while continuing to grow rapidly in Europe.

The Role

You own the mechanics that make the TPRM program run day to day. You are the person who keeps the vendor and partner inventory reconciled, moves relationships through onboarding and due diligence, coordinates SME reviews across every function that touches third-party risk, tracks BCDR posture on every critical vendor, and keeps the TPRM issues pipeline current.

You own:

• Inventory: maintaining the third-party inventory and running the quarterly reconciliation against payment and contracting data (you do not own payment/contracting controls yourself — you reconcile against them).

• Onboarding: running new vendor and partner relationships through intake and onboarding.

• Initial & Ongoing Due Diligence: executing initial due diligence at onboarding and ongoing due diligence on the recurring schedule for existing relationships.

• Audit Oversight: tracking and coordinating third-party audit requirements and following up on findings.

• SME Reviews: coordinating and tracking risk-based reviews with subject matter experts across Information Technology, Information Security, BSA/AML & OFAC, Compliance (Consumer & Regulatory), Credit, Finance, and Legal.

• BCDR: collecting and tracking RTO & RPO assessments for critical vendors, and maintaining exit plans.

• Fourth Party Due Diligence: extending due diligence downstream to critical fourth parties where required.

• Vendor DDQ & Partner DDQ: administering and tracking due diligence questionnaires for both vendor and partner relationships.

• SLA: tracking service level agreements and monitoring performance against them.

• Issues: maintaining the TPRM issues log from identification through remediation and closure.

• Reverse Due Diligence: supporting due diligence requests that come from partners and counterparties assessing Augustus.

Your first 90 days

• Weeks 1-4: You learn how third-party risk actually runs today — what's in (and missing from) the inventory, how onboarding and due diligence really move through the pipeline, which SME reviews are current versus overdue, what BCDR and exit plan documentation exists for critical vendors, and where the issues log breaks down.

  Weeks 5-8: You take over the operational cadence. Onboarding and due diligence are moving on schedule. The inventory reconciliation is running quarterly without prompting. SME reviews are tracked and chased across all seven functions. DDQs are going out and coming back on time.

  Weeks 9-12: You start closing gaps — cleaning up the BCDR and exit plan documentation for critical vendors, tightening fourth-party due diligence coverage, and getting the TPRM issues log to reflect true status. Leadership trusts the inventory and the pipeline status without double-checking them.

Who Will Thrive At Augustus

We believe that throwing smart people with high agency at big problems produces the best outcomes. The people who succeed here share the following traits:

• Relentless: You can't leave something broken. You don't stop because it got hard or because no one is watching.

• Set The Bar: You're harder on yourself than anyone else would be. You don't need external accountability to care about quality.

• Shape The Game: You don't wait for a playbook and you don't need one. You walk into genuinely new territory and figure it out. You move before anyone asked you to.

• Systems First: You don't solve problems by adding people or effort. You build systems that make the problem smaller. Your first instinct is to automate, not to handle it manually.

This role is for you if:

• You get satisfaction from chasing down documentation, closing out a due diligence file, and keeping an inventory clean and reconciled.

• You want to learn TPRM from the inside by running the pipeline, not by reviewing it after the fact.

• You're comfortable coordinating with SMEs across seven different functions and holding them to a review deadline without formal authority over them.

• You'd rather fix the tracker or tighten the process than send another follow-up email chasing a DDQ response.

• You want a role where the scope is real and will grow as you prove you can carry it.

This is not for you if:

• You want a fully mature program and tooling handed to you with no gaps to close.

• You need someone else to define your daily priorities for you.

• You're uncomfortable owning a deadline for something you don't directly control, like a vendor's response time.

• You're looking for a purely strategic role with no operational coordination responsibility.

• Detail-heavy, document-intensive work across many concurrent relationships drains you rather than satisfies you.

Hard Requirements

• Several years of experience in third-party/vendor risk management, procurement risk, compliance, or a related operational/governance function.

• Comfortable managing due diligence and review cycles across multiple vendors, partners, and internal SME functions at once.

• Strong organizational and documentation skills — inventories, DDQs, and trackers stay accurate under you, not just after you build them.

• Working knowledge of, or strong ability to quickly learn, third-party risk concepts including due diligence tiering, BCDR/RTO/RPO, SLA monitoring, and issues management.

• Comfortable working with Excel/spreadsheets and reporting tools; experience with GRC or TPRM platforms is a plus but not required.

• In New York City, or ready to relocate.

Pay transparency

Compensation packages at Augustus include base salary, equity, and benefits. New hire offers are made based on a candidate's experience, expertise, and geographic location. The annual US base salary range for this role is $150,000-$250,000 + equity.

What We Offer

• Career Growth: You will be given more responsibility and pushed to grow faster than ever before.

• Network: Your peers are brilliant, highly motivated people. These people will be foundational in your future opportunities.

• Real Participation: Employees are shareholders. You will think and act like an owner.

• Perks & Benefits: Relocation support, visa support, the latest Apple gear (MacBook + AirPods), lunch benefit, gym benefit, a beautiful office in the heart of the city, 4x on-/offsites per year, and an annual development budget.

Additional to the global benefits above, we offer localized benefits such as comprehensive medical, dental, and vision insurance and a 401(k) retirement plan for our US team.

Augustus is committed to creating an inclusive environment where people from all backgrounds can thrive and where different viewpoints and experiences are valued and respected. Augustus will consider all applications for employment without regard to race, ethnicity, national origin, religious beliefs, gender identity or expression, sexual orientation, neurodiversity, disability, age, parental or veteran status.