Sr. Risk Associate (Contract)

Upstart, a leading AI lending marketplace, is seeking a Sr. Risk Associate (Contract) to join its Third Party Risk Management (TPRM) team. This team is responsible for ensuring that third-party relationships are identified, assessed, monitored, and governed in alignment with regulatory expectations and the company's risk appetite. The role is remote, with the team operating across East and West Coast time zones.

As a Sr. Risk Associate, you will conduct third-party supplier risk assessments, including due diligence, onboarding, and ongoing monitoring. Your responsibilities will involve analyzing supplier controls, security posture, and business continuity capabilities to identify risk gaps. You will collaborate with internal stakeholders to communicate risk findings and recommend mitigation strategies, support issue tracking and remediation validation, and maintain accurate documentation to support audits, exams, and regulatory requirements.

The ideal candidate will have at least 3 years of experience in risk management, third-party risk, audit, or compliance, with a background in performing supplier risk assessments or control evaluations. Familiarity with regulatory expectations such as those from the OCC, FDIC, and CFPB, as well as industry frameworks like NIST, is essential. Experience with risk management tools or vendor management systems, such as Zip, Kobalt, ProcessUnity, Archer, or ServiceNow, is also required.

This is a 6-week contract assignment with the possibility of extension. As a contractor, this role is not eligible for Upstart’s employee compensation, equity, bonus, or benefits offerings.

Upstart is a digital-first company, allowing employees to live and work anywhere in the U.S. The company emphasizes in-person collaboration through regular on-sites, with the cadence varying depending on the team and role.