About the Role

Flex is building a next-generation compliance function where AI-enabled systems and human expertise work together to scale regulatory oversight without slowing product innovation. As the Head of Product Compliance, you will lead Flex’s product compliance function, partnering closely with Product, Engineering, Legal, Risk, and Banking Partners to enable compliant innovation across Flex’s lending and payments ecosystem.

This leader will be responsible for:

• Driving the strategy and execution of product compliance advisory
• Scaling the function through AI-enabled workflows, automation, and intelligent compliance tooling
• Embedding compliance earlier in the product lifecycle
• Establishing durable governance that supports Flex’s GM operating model

This role will oversee a team responsible for product advisory, regulatory interpretation, product risk assessments, marketing review, and partner compliance coordination. A key priority for this role is to modernize the compliance operating model, including implementing AI-driven review systems, automated regulatory monitoring, and agent-based compliance workflows that increase both the speed and quality of compliance engagement.

What You Will Do

• Lead and scale the Product Compliance function, setting strategy, priorities, and operating standards that enable responsible growth across Flex’s lending and payments products.
• Embed compliance into the product lifecycle, from concept through launch and ongoing governance, ensuring regulatory requirements and consumer protection principles are integrated early in product design and decision-making.
• Serve as a strategic partner to Product, Engineering, Legal, Risk, and Marketing, guiding complex regulatory interpretation and enabling compliant innovation at the speed of the business.
• Modernize the compliance operating model by implementing AI-enabled workflows, automated monitoring, and intelligent tooling that increase the velocity, consistency, and scalability of compliance engagement.
• Deploy and govern AI-assisted review systems and agent-based workflows across areas such as marketing compliance review, regulatory change monitoring, and product risk assessment.
• Establish scalable compliance frameworks, including risk-tiered review processes, standards libraries, and governance mechanisms, that reduce friction while maintaining regulatory rigor.
• Oversee compliance advisory for new product launches, product changes, marketing initiatives, and emerging regulatory issues, ensuring decisions are well-documented and defensible.
• Partner with product and operations teams to investigate compliance issues, drive root-cause remediation, and strengthen preventative controls.
• Represent Compliance in engagement with bank partners, regulators, and internal leadership, ensuring clarity, credibility, and alignment on regulatory expectations.
• Drive a culture of accountability, precision, and ownership within the Product Compliance team while developing leaders capable of operating effectively in a high-growth fintech environment.

Who You Are

• 10+ years of experience in compliance advisory, product compliance, or regulatory risk roles within fintech, consumer lending, payments, banking, or financial services.
• Proven experience leading product compliance or regulatory advisory teams in fast-moving technology organizations.
• Deep knowledge of consumer protection regulations, including lending, payments, and fintech regulatory frameworks.
• Demonstrated ability to partner effectively with product and engineering teams during product development.
• Experience building or scaling technology-enabled compliance programs.
• AI & Compliance Modernization Experience
• Experience implementing AI-enabled compliance tooling, automation frameworks, or agent-based workflows within compliance, risk, or product governance functions.
• Familiarity with using technology to improve the speed, quality, and scalability of compliance review processes.
• Ability to translate regulatory requirements into technology-driven compliance solutions that integrate into product and operational workflows.

Why Join Us

This role offers a rare opportunity to shape how compliance operates within a high-growth fintech company. You will have the chance to define what a modern, technology-enabled compliance function looks like and help build systems that allow compliance to scale alongside innovation.

You will gain:

• High visibility with senior leadership and bank partners
• Ownership of one of the company’s most critical risk and governance functions
• The opportunity to build a next-generation compliance operating model powered by AI and automation
• A direct role in shaping how responsible fintech lending evolves

For candidates located in our Tier 1 markets (NYC/SF/Seattle), the base salary pay range for this role is $252,000—$315,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.

About the Role

Flex is building a next-generation compliance function where AI-enabled systems and human expertise work together to scale regulatory oversight without slowing product innovation. As the Head of Product Compliance, you will lead Flex’s product compliance function, partnering closely with Product, Engineering, Legal, Risk, and Banking Partners to enable compliant innovation across Flex’s lending and payments ecosystem.

This leader will be responsible for:

• Driving the strategy and execution of product compliance advisory
• Scaling the function through AI-enabled workflows, automation, and intelligent compliance tooling
• Embedding compliance earlier in the product lifecycle
• Establishing durable governance that supports Flex’s GM operating model

This role will oversee a team responsible for product advisory, regulatory interpretation, product risk assessments, marketing review, and partner compliance coordination. A key priority for this role is to modernize the compliance operating model, including implementing AI-driven review systems, automated regulatory monitoring, and agent-based compliance workflows that increase both the speed and quality of compliance engagement.

What You Will Do

• Lead and scale the Product Compliance function, setting strategy, priorities, and operating standards that enable responsible growth across Flex’s lending and payments products.
• Embed compliance into the product lifecycle, from concept through launch and ongoing governance, ensuring regulatory requirements and consumer protection principles are integrated early in product design and decision-making.
• Serve as a strategic partner to Product, Engineering, Legal, Risk, and Marketing, guiding complex regulatory interpretation and enabling compliant innovation at the speed of the business.
• Modernize the compliance operating model by implementing AI-enabled workflows, automated monitoring, and intelligent tooling that increase the velocity, consistency, and scalability of compliance engagement.
• Deploy and govern AI-assisted review systems and agent-based workflows across areas such as marketing compliance review, regulatory change monitoring, and product risk assessment.
• Establish scalable compliance frameworks, including risk-tiered review processes, standards libraries, and governance mechanisms, that reduce friction while maintaining regulatory rigor.
• Oversee compliance advisory for new product launches, product changes, marketing initiatives, and emerging regulatory issues, ensuring decisions are well-documented and defensible.
• Partner with product and operations teams to investigate compliance issues, drive root-cause remediation, and strengthen preventative controls.
• Represent Compliance in engagement with bank partners, regulators, and internal leadership, ensuring clarity, credibility, and alignment on regulatory expectations.
• Drive a culture of accountability, precision, and ownership within the Product Compliance team while developing leaders capable of operating effectively in a high-growth fintech environment.

Who You Are

• 10+ years of experience in compliance advisory, product compliance, or regulatory risk roles within fintech, consumer lending, payments, banking, or financial services.
• Proven experience leading product compliance or regulatory advisory teams in fast-moving technology organizations.
• Deep knowledge of consumer protection regulations, including lending, payments, and fintech regulatory frameworks.
• Demonstrated ability to partner effectively with product and engineering teams during product development.
• Experience building or scaling technology-enabled compliance programs.
• AI & Compliance Modernization Experience
• Experience implementing AI-enabled compliance tooling, automation frameworks, or agent-based workflows within compliance, risk, or product governance functions.
• Familiarity with using technology to improve the speed, quality, and scalability of compliance review processes.
• Ability to translate regulatory requirements into technology-driven compliance solutions that integrate into product and operational workflows.

Why Join Us

This role offers a rare opportunity to shape how compliance operates within a high-growth fintech company. You will have the chance to define what a modern, technology-enabled compliance function looks like and help build systems that allow compliance to scale alongside innovation.

You will gain:

• High visibility with senior leadership and bank partners
• Ownership of one of the company’s most critical risk and governance functions
• The opportunity to build a next-generation compliance operating model powered by AI and automation
• A direct role in shaping how responsible fintech lending evolves

For candidates located in our Tier 1 markets (NYC/SF/Seattle), the base salary pay range for this role is $252,000—$315,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.

About Flex

Flex is a venture-backed fintech company helping businesses manage and optimize their spend with modern financial products and software. We partner with some of the most innovative companies in the world and operate in a highly regulated, fast-growing environment. As we continue to scale, building best‑in‑class risk and compliance programs is critical to enabling our growth.

The Role

We are looking for an Associate Director, Third-Party Risk Management (TPRM) to own the TPRM pillar at Flex. This is not a program management role. It is a pillar ownership role: you set the risk posture, define the operating model, and are accountable for outcomes across a vendor population that touches every part of the business.

You will lead a small team, establish the direction for how Flex evaluates and monitors third-party risk, and make the calls on where speed and rigor need to be balanced. You will design AI-enabled workflows that scale the team's capacity without sacrificing auditability or regulatory defensibility. And you will hold Flex's third-party risk position across the organization, shaping decisions in Product, Engineering, Finance, and Procurement rather than responding to requests from them.

This role is right for someone who has owned TPRM at a mature, regulated institution and also built something from the ground up at a high-growth fintech. Someone comfortable with ambiguity, confident in their risk judgment, and ready to be handed the reins.

What You’ll Do

1. Own Flex's third-party risk posture end-to-end: set the strategy, define the operating model, and be accountable for outcomes across the full vendor population
2. Establish and maintain the policies, standards, and governance framework that underpin TPRM across the organization
3. Make risk-based decisions on vendor approvals, exceptions, and escalations, including explicit tradeoffs between speed and risk exposure, and defend those positions to senior leadership and regulators
4. Architect scalable intake, tiering, due diligence, and monitoring workflows, designing AI-enabled automation where it improves speed and consistency without removing human judgment from consequential decisions
5. Build signal-driven monitoring systems that surface vendor risk in real time (financial distress, security incidents, operational failures) rather than relying on calendar-based review cycles
6. Design and own AI workflows for high-volume tasks like SOC report analysis, questionnaire scoring, and exception tracking, with clear auditability and human-in-the-loop checkpoints throughout
7. Drive risk alignment across Product, Engineering, Finance, and Procurement, shaping vendor strategy and sourcing decisions upstream rather than reviewing them after the fact
8. Serve as Flex's authoritative voice on third-party risk in regulatory exams, audits, and customer due diligence requests
9. Own the reporting framework that gives senior leadership real-time, decision-relevant visibility into third-party risk posture
10. Proactively identify emerging third-party risks across new vendor categories, evolving threat landscapes, and regulatory developments, and evolve controls before they become issues
11. Help mentor and develop more junior team members as the program and team scale

What We’re Looking For

• 7+ years of experience in third-party risk, vendor risk, or a closely related risk and compliance discipline
• Experience at both a large, regulated institution with a mature risk function and a high-growth, venture-backed fintech or technology company
• Demonstrated track record of making and defending risk-based decisions under ambiguity, including explicit speed-vs-risk tradeoffs
• Experience designing AI-enabled workflows for risk or compliance use cases, with a clear point of view on where automation helps and where human oversight is non-negotiable
• Strong working knowledge of vendor risk domains: security, privacy, operational, financial, and regulatory
• Proven ability to influence across Product, Engineering, and Finance, not just within a compliance or risk silo
• Strong communication skills; able to translate complex risk positions into clear recommendations for executive and board-level audiences
• Comfort with data; SQL experience or the ability to query and analyze data independently is a strong plus
• Experience supporting or leading regulatory exams in a financial services or fintech environment

Nice to Have

• Experience building a TPRM program from scratch at a high-growth company
• Familiarity with GRC platforms and common TPRM tooling
• Working knowledge of relevant frameworks and standards (SOC 2, ISO 27001, NIST, PCI, etc.)
• Prior people management or team lead experience

Flex takes a market-based approach to pay, ensuring compensation is commensurate with a candidate's experience and our internal leveling guidelines. For candidates located in our Tier 1 markets (NYC/ SF), the base salary pay range for this role is $176,000—$220,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.

The Role

We are looking for an Associate Director, Third-Party Risk Management (TPRM) to own the TPRM pillar at Flex. This is not a program management role. It is a pillar ownership role: you set the risk posture, define the operating model, and are accountable for outcomes across a vendor population that touches every part of the business.

You will lead a small team, establish the direction for how Flex evaluates and monitors third-party risk, and make the calls on where speed and rigor need to be balanced. You will design AI-enabled workflows that scale the team's capacity without sacrificing auditability or regulatory defensibility. And you will hold Flex's third-party risk position across the organization, shaping decisions in Product, Engineering, Finance, and Procurement rather than responding to requests from them.

This role is right for someone who has owned TPRM at a mature, regulated institution and also built something from the ground up at a high-growth fintech. Someone comfortable with ambiguity, confident in their risk judgment, and ready to be handed the reins.

What You’ll Do

1. Own Flex's third-party risk posture end-to-end: set the strategy, define the operating model, and be accountable for outcomes across the full vendor population
2. Establish and maintain the policies, standards, and governance framework that underpin TPRM across the organization
3. Make risk-based decisions on vendor approvals, exceptions, and escalations, including explicit tradeoffs between speed and risk exposure, and defend those positions to senior leadership and regulators
4. Architect scalable intake, tiering, due diligence, and monitoring workflows, designing AI-enabled automation where it improves speed and consistency without removing human judgment from consequential decisions
5. Build signal-driven monitoring systems that surface vendor risk in real time (financial distress, security incidents, operational failures) rather than relying on calendar-based review cycles
6. Design and own AI workflows for high-volume tasks like SOC report analysis, questionnaire scoring, and exception tracking, with clear auditability and human-in-the-loop checkpoints throughout
7. Drive risk alignment across Product, Engineering, Finance, and Procurement, shaping vendor strategy and sourcing decisions upstream rather than reviewing them after the fact
8. Serve as Flex's authoritative voice on third-party risk in regulatory exams, audits, and customer due diligence requests
9. Own the reporting framework that gives senior leadership real-time, decision-relevant visibility into third-party risk posture
10. Proactively identify emerging third-party risks across new vendor categories, evolving threat landscapes, and regulatory developments, and evolve controls before they become issues
11. Help mentor and develop more junior team members as the program and team scale

What We’re Looking For

• 7+ years of experience in third-party risk, vendor risk, or a closely related risk and compliance discipline
• Experience at both a large, regulated institution with a mature risk function and a high-growth, venture-backed fintech or technology company
• Demonstrated track record of making and defending risk-based decisions under ambiguity, including explicit speed-vs-risk tradeoffs
• Experience designing AI-enabled workflows for risk or compliance use cases, with a clear point of view on where automation helps and where human oversight is non-negotiable
• Strong working knowledge of vendor risk domains: security, privacy, operational, financial, and regulatory
• Proven ability to influence across Product, Engineering, and Finance, not just within a compliance or risk silo
• Strong communication skills; able to translate complex risk positions into clear recommendations for executive and board-level audiences
• Comfort with data; SQL experience or the ability to query and analyze data independently is a strong plus
• Experience supporting or leading regulatory exams in a financial services or fintech environment

Nice to Have

• Experience building a TPRM program from scratch at a high-growth company
• Familiarity with GRC platforms and common TPRM tooling
• Working knowledge of relevant frameworks and standards (SOC 2, ISO 27001, NIST, PCI, etc.)
• Prior people management or team lead experience

Flex takes a market-based approach to pay, ensuring compensation is commensurate with a candidate's experience and our internal leveling guidelines. For candidates located in our Tier 1 markets (NYC/ SF), the base salary pay range for this role is $176,000—$220,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.

The Role

We are looking for an Associate Director, Third-Party Risk Management (TPRM) to own the TPRM pillar at Flex. This is not a program management role. It is a pillar ownership role: you set the risk posture, define the operating model, and are accountable for outcomes across a vendor population that touches every part of the business.

You will lead a small team, establish the direction for how Flex evaluates and monitors third-party risk, and make the calls on where speed and rigor need to be balanced. You will design AI-enabled workflows that scale the team's capacity without sacrificing auditability or regulatory defensibility. And you will hold Flex's third-party risk position across the organization, shaping decisions in Product, Engineering, Finance, and Procurement rather than responding to requests from them.

This role is right for someone who has owned TPRM at a mature, regulated institution and also built something from the ground up at a high-growth fintech. Someone comfortable with ambiguity, confident in their risk judgment, and ready to be handed the reins.

What You’ll Do

1. Own Flex's third-party risk posture end-to-end: set the strategy, define the operating model, and be accountable for outcomes across the full vendor population
2. Establish and maintain the policies, standards, and governance framework that underpin TPRM across the organization
3. Make risk-based decisions on vendor approvals, exceptions, and escalations, including explicit tradeoffs between speed and risk exposure, and defend those positions to senior leadership and regulators
4. Architect scalable intake, tiering, due diligence, and monitoring workflows, designing AI-enabled automation where it improves speed and consistency without removing human judgment from consequential decisions
5. Build signal-driven monitoring systems that surface vendor risk in real time (financial distress, security incidents, operational failures) rather than relying on calendar-based review cycles
6. Design and own AI workflows for high-volume tasks like SOC report analysis, questionnaire scoring, and exception tracking, with clear auditability and human-in-the-loop checkpoints throughout
7. Drive risk alignment across Product, Engineering, Finance, and Procurement, shaping vendor strategy and sourcing decisions upstream rather than reviewing them after the fact
8. Serve as Flex's authoritative voice on third-party risk in regulatory exams, audits, and customer due diligence requests
9. Own the reporting framework that gives senior leadership real-time, decision-relevant visibility into third-party risk posture
10. Proactively identify emerging third-party risks across new vendor categories, evolving threat landscapes, and regulatory developments, and evolve controls before they become issues
11. Help mentor and develop more junior team members as the program and team scale

What We’re Looking For

• 7+ years of experience in third-party risk, vendor risk, or a closely related risk and compliance discipline
• Experience at both a large, regulated institution with a mature risk function and a high-growth, venture-backed fintech or technology company
• Demonstrated track record of making and defending risk-based decisions under ambiguity, including explicit speed-vs-risk tradeoffs
• Experience designing AI-enabled workflows for risk or compliance use cases, with a clear point of view on where automation helps and where human oversight is non-negotiable
• Strong working knowledge of vendor risk domains: security, privacy, operational, financial, and regulatory
• Proven ability to influence across Product, Engineering, and Finance, not just within a compliance or risk silo
• Strong communication skills; able to translate complex risk positions into clear recommendations for executive and board-level audiences
• Comfort with data; SQL experience or the ability to query and analyze data independently is a strong plus
• Experience supporting or leading regulatory exams in a financial services or fintech environment

Nice to Have

• Experience building a TPRM program from scratch at a high-growth company
• Familiarity with GRC platforms and common TPRM tooling
• Working knowledge of relevant frameworks and standards (SOC 2, ISO 27001, NIST, PCI, etc.)
• Prior people management or team lead experience

Flex takes a market-based approach to pay, ensuring compensation is commensurate with a candidate's experience and our internal leveling guidelines. For candidates located in our Tier 1 markets (NYC/ SF), the base salary pay range for this role is $176,000—$220,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.

About the Role

Flex is building a next-generation compliance function where AI-enabled systems and human expertise work together to scale regulatory oversight without slowing product innovation. As the Head of Product Compliance, you will lead Flex’s product compliance function, partnering closely with Product, Engineering, Legal, Risk, and Banking Partners to enable compliant innovation across Flex’s lending and payments ecosystem.

This leader will be responsible for:

• Driving the strategy and execution of product compliance advisory
• Scaling the function through AI-enabled workflows, automation, and intelligent compliance tooling
• Embedding compliance earlier in the product lifecycle
• Establishing durable governance that supports Flex’s GM operating model

This role will oversee a team responsible for product advisory, regulatory interpretation, product risk assessments, marketing review, and partner compliance coordination. A key priority for this role is to modernize the compliance operating model, including implementing AI-driven review systems, automated regulatory monitoring, and agent-based compliance workflows that increase both the speed and quality of compliance engagement.

What You Will Do

• Lead and scale the Product Compliance function, setting strategy, priorities, and operating standards that enable responsible growth across Flex’s lending and payments products.
• Embed compliance into the product lifecycle, from concept through launch and ongoing governance, ensuring regulatory requirements and consumer protection principles are integrated early in product design and decision-making.
• Serve as a strategic partner to Product, Engineering, Legal, Risk, and Marketing, guiding complex regulatory interpretation and enabling compliant innovation at the speed of the business.
• Modernize the compliance operating model by implementing AI-enabled workflows, automated monitoring, and intelligent tooling that increase the velocity, consistency, and scalability of compliance engagement.
• Deploy and govern AI-assisted review systems and agent-based workflows across areas such as marketing compliance review, regulatory change monitoring, and product risk assessment.
• Establish scalable compliance frameworks, including risk-tiered review processes, standards libraries, and governance mechanisms, that reduce friction while maintaining regulatory rigor.
• Oversee compliance advisory for new product launches, product changes, marketing initiatives, and emerging regulatory issues, ensuring decisions are well-documented and defensible.
• Partner with product and operations teams to investigate compliance issues, drive root-cause remediation, and strengthen preventative controls.
• Represent Compliance in engagement with bank partners, regulators, and internal leadership, ensuring clarity, credibility, and alignment on regulatory expectations.
• Drive a culture of accountability, precision, and ownership within the Product Compliance team while developing leaders capable of operating effectively in a high-growth fintech environment.

Who You Are

• 10+ years of experience in compliance advisory, product compliance, or regulatory risk roles within fintech, consumer lending, payments, banking, or financial services.
• Proven experience leading product compliance or regulatory advisory teams in fast-moving technology organizations.
• Deep knowledge of consumer protection regulations, including lending, payments, and fintech regulatory frameworks.
• Demonstrated ability to partner effectively with product and engineering teams during product development.
• Experience building or scaling technology-enabled compliance programs.
• AI & Compliance Modernization Experience
• Experience implementing AI-enabled compliance tooling, automation frameworks, or agent-based workflows within compliance, risk, or product governance functions.
• Familiarity with using technology to improve the speed, quality, and scalability of compliance review processes.
• Ability to translate regulatory requirements into technology-driven compliance solutions that integrate into product and operational workflows.

Why Join Us

This role offers a rare opportunity to shape how compliance operates within a high-growth fintech company. You will have the chance to define what a modern, technology-enabled compliance function looks like and help build systems that allow compliance to scale alongside innovation.

You will gain:

• High visibility with senior leadership and bank partners
• Ownership of one of the company’s most critical risk and governance functions
• The opportunity to build a next-generation compliance operating model powered by AI and automation
• A direct role in shaping how responsible fintech lending evolves

For candidates located in our Tier 1 markets (NYC/SF/Seattle), the base salary pay range for this role is $252,000—$315,000 USD. For all other U.S. locations, Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the Tier 1 states listed above, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.