Sr. Risk Associate

About Upstart

At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.

As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress.

We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you.

If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you.

The Team:

Upstart’s Third Party Risk Management (TPRM) team ensures that third-party relationships are identified, assessed, monitored, and governed in alignment with regulatory expectations, interagency guidance, and company risk appetite. The team partners cross-functionally to enable safe, scalable supplier usage while strengthening operational resilience.

As a Contractor on the TPRM team, you will execute third-party supplier due diligence, risk assessments, control effectiveness, and support ongoing monitoring activities. You will operate with moderate independence, use AI-driven tooling, apply risk based judgment, and collaborate with business and other risk stakeholders to ensure supplier risks are appropriately managed.

This is a 6-week assignment with the chance to extend.

How you’ll make an impact

• Conduct third-party supplier risk assessments across due diligence, onboarding, and ongoing monitoring
• Analyze supplier controls, security posture, and business continuity capabilities to identify risk gaps
• Partner with internal stakeholders to communicate risk findings and recommend mitigation strategies
• Support issue tracking, remediation validation, and escalation of third-party risks
• Maintain accurate documentation and reporting to support audits, exams, and regulatory requirements

Minimum Qualifications

• 3+ years of experience in risk management, third-party risk, audit, or compliance
• Experience performing supplier risk assessments or control evaluations
• Familiarity with regulatory expectations (e.g., OCC, FDIC, CFPB,Interagency Guidance on Third-Party Relationships: Risk Management ) or industry frameworks (e.g., NIST, other relevant frameworks)
• Experience working with risk management tools or vendor management systems (e.g., Zip, Kobalt, ProcessUnity, Archer, ServiceNow)
• Experience managing supplier risk and performance in collaboration with internal business stakeholders and suppliers

Preferred Qualifications

• Knowledge of third-party risk lifecycle including due diligence, contracting, contingency planning, ongoing monitoring, termination
• Ability to analyze technical and operational controls across compliance areas (e.g., fair lending, consumer protection, marketing) security, privacy, and business continuity domains with strong attention to detail
• Experience working in financial services or fintech environments including responding to audit requests
• Proven record of using AI and/or automation to support risk management activities
• Solution driven approach when working with internal and external stakeholders while managing multiple priorities
• Familiarity with data analysis and reporting for risk insights

This opportunity is a contractor role and is not eligible for Upstart’s employee compensation, equity, bonus, or benefits offerings.

Position location This role is available in the following locations: Remote

Time zone requirements The team operates on the East/West coast time zones.

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.