The Team: 

Upstart’s Risk team is hiring to enhance its second line of defense function in support of its application to establish a national bank. The Risk team is responsible for Upstart’s enterprise risk management program and risk governance, as well as for providing independent oversight and credible challenge across the following risk categories: operational risk, treasury risk (including liquidity risk, interest rate risk, price risk, and capital management), and operational risk. We partner with first-line business functions, senior and executive leadership, and the board of directors to ensure effective identification and assessment, measurement, monitoring and reporting, and response and control for all core risk types and in alignment with regulatory expectations. 

Upstart is hiring a Senior Manager, Risk Analytics to build and own the Risk teams’ risk data and analytics program, including the Key Risk Indicator (KRI) program and framework and quantitative risk reporting infrastructure. This role will work with first-line risk owners and second-line risk subject matter experts to: design and develop robust and scalable risk data models to empower the Risk team to retrieve meaningful insights; establish key risk indicators (KRIs) for all risk categories; implement centralized aggregation, monitoring, and reporting of those KRIs; and enforce a consistent methodology for risk metric measurement, threshold setting and monitoring, and breach escalation protocol and response framework. Additionally, this role will provide risk data support to all second-line risk teams, and will be a key standard setter for cross-team GRC tool usage. By establishing and running a centralized, quantitative risk monitoring program for Upstart Bank, this role is a key component of the overall ERM program, and will be a partner to senior first-line risk owners and second-line risk experts across all domains, as well as a liaison to external stakeholders such as examiners and auditors on the risk metrics program. 

How you’ll make an impact

• Understand how data is produced and consumed at a deep level in order to design risk data pipelines and models and build curated data sets to support enterprise-wide risk monitoring and reporting
• Own and manage the KRI program, collaborating with first-line risk owners and second-line risk domain SMEs to design, track, and report on risk metrics across all risk types and business activities
• Build and maintain risk reporting infrastructure, including dynamic dashboards, snapshot reporting, and risk data infrastructure and aggregation capabilities using existing company data sets and tools (e.g., Looker, Jira, Mode)
• Meet consumers of risk data where they are by wearing an educator’s hat and training them on risk dashboards and tools
• Provide data and analytical support for enterprise risk assessments, management and board reporting, exam and audit requests, and ad hoc risk data requests
• Partner with leaders in Risk to translate risk program requirements into scalable, repeatable data and reporting solutions
• Support the setup, maintenance, and administration of the GRC tool for all Risk teams by defining cross-team 

Minimum Qualifications 

• Bachelor's degree or equivalent practical experience
• 7+ years of experience in risk analytics, or a related quantitative function in a banking or financial services environment
• Strong understanding of data modeling concepts in both transactional and analytical databases
• Demonstrated experience with risk data aggregation, KRI design and monitoring, or risk reporting infrastructure
• Expertise in SQL, Python and ETL optimization techniques; as well as data tools such as Looker, Mode, or comparable BI/analytics platforms

Preferred Qualifications

• Experience in a bank or OCC-regulated institution, particularly building risk monitoring programs in advance of regulatory examination
• Familiarity with OCC or Federal Reserve expectations for enterprise risk reporting and KRI frameworks
• Knowledge of quantitative risk measurement techniques such as scenario analysis or risk scoring methodologies
• Experience building automated data pipelines or dashboards for regulatory or executive reporting
• Experience implementing or managing a bank-grade GRC tool
• Strong project management skills with a track record of independently driving programs from design to implementation

Position location This role is available in the following locations: Remote, San Mateo, CA, and Columbus, OH

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE
#LI-MidSenior

The Team: 

Upstart’s Risk team is hiring to enhance its second line of defense function in support of its application to establish a national bank. The Risk team is responsible for Upstart’s enterprise risk management program and risk governance, as well as for providing independent oversight and credible challenge across the following risk categories: operational risk, treasury risk (including liquidity risk, interest rate risk, price risk, and capital management), and operational risk. We partner with first-line business functions, senior and executive leadership, and the board of directors to ensure effective identification and assessment, measurement, monitoring and reporting, and response and control for all core risk types and in alignment with regulatory expectations. 

Upstart is hiring a Director, Enterprise Risk Management to lead and grow the Risk team’s ERM function for Upstart Bank. This role will establish, maintain, and continually enhance the bank’s ERM program and framework, including: management and maintenance of the risk appetite statement and other ERM program governing documents; ownership of risk assessment processes and methodologies; collection and monitoring of risk metrics; coordination of all risk governance activities, including aggregated management and board risk reporting. Additionally, this role will oversee the operational risk team responsible for conducting ongoing risk and control assessments across the bank’s operations. This includes establishing an operational risk program framework and risk assessment schedule, recommending actions to mitigate operational risk, and producing risk reporting and insights on the bank’s aggregated operational risk profile, trends, and high risk areas. 

This role will manage the ERM Program and Operational Risk teams, and will be responsible for building out existing risk infrastructure and processes to meet the rigorous expectations of a nationally chartered bank, including hiring additional roles to expand existing team capacity.  As a senior member of the Risk organization, this role works collaboratively with internal leaders across all three lines of defense, and will serve as a primary point of contact for management as well as external stakeholders such as bank examiners on matters related to the bank’s ERM and Operational Risk programs, including during the charter application process. 

How you’ll make an impact

Define and maintain the Bank's enterprise risk management framework, including risk appetite statement, risk assessment methodology, and aggregated risk reportingLead the ERM Program team in executing enterprise risk assessments; maintaining risk and control inventories and gap tracking; and measuring risk quantitatively via key risk indicators for all risk categoriesEnsure consistent quantitative and qualitative risk identification, assessment, and measurement methodologies Direct the team's work on risk committee and board reporting, policy management, and ERM program maintenance and executionDirect the Operational Risk Program activities, ensuring consistent assessment methodology is applied across all product lines and providing actionable analysis and insights on high risk areas requiring actionServe as a senior point of escalation and relationship manager for external stakeholders including OCC examiners, internal and external auditors, capital markets partners, and lending partnersDevelop, manage, and hire for the ERM Program and Operational Risk Program teams

Minimum Qualifications 

• Bachelor's degree or equivalent practical experience
• 10+ years of experience in enterprise risk management in a banking or financial services environment
• Demonstrated experience building or leading an enterprise risk management program, including risk framework development, risk assessment methodology, quantitative risk measurement, and risk governance
• Direct experience working with OCC, Federal Reserve, or other federal banking regulator examination processes
  

Preferred Qualifications

• Advanced degree (MBA, JD, or equivalent) or professional risk certification
• Experience at a de novo bank, bank holding company, or OCC-regulated institution at an early stage of build-out
• Experience leading cross-functional risk teams spanning multiple risk domains
• Familiarity with OCC Comptroller's Handbook standards for ERM, operational risk, and risk governance
• Strong quantitative skills with experience in risk data aggregation, KRI design, and GRC tool management
• Experience presenting to board-level risk committees or senior executive leadership on risk programs and results
  

Position location This role is available in the following locations: Remote

Time zone requirements The team operates on the East/West coast time zones. 

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE

#LI-Director 

The Team: 

Upstart’s Risk team is hiring to enhance its second line of defense function in support of its application to establish a national bank. The Risk team is responsible for Upstart’s enterprise risk management program and risk governance, as well as for providing independent oversight and credible challenge across the following risk categories: operational risk, treasury risk (including liquidity risk, interest rate risk, price risk, and capital management), and operational risk. We partner with first-line business functions, senior and executive leadership, and the board of directors to ensure effective identification and assessment, measurement, monitoring and reporting, and response and control for all core risk types and in alignment with regulatory expectations. 

Upstart is hiring a Director, Treasury Risk to establish and lead the independent second-line treasury risk oversight program. This role will partner closely with the first-line Bank Treasury function and will establish risk frameworks and limits in alignment with OCC and FDIC requirements and expectations, including with respect to asset-liability management, capital management, and investment portfolio management. In addition to partnering with the first-line Bank treasury team to define and implement treasury risk management activities and appropriate oversight and reporting, this role will provide critical second-line oversight and input on treasury risk exposures, risk limit breaches, and trends to management, oversight committees such as an Asset-Liability Committee (ALCO), and the committee of the board responsible for risk oversight.  This role will also be the primary point of contact for critical external stakeholders such as bank examiners on an ongoing basis, including during the charter application process.

How you’ll make an impact

• Establish the Bank's treasury risk oversight program, including frameworks, policies, risk metrics, limits, and monitoring processes for liquidity, interest rate, price, and capital management risk
• Provide independent second-line review, challenge, and oversight of the first-line Bank Treasury team’s activities — including cash flow management, ALM, balance sheet positioning, stress testing, and investment portfolio management
• Deliver credible challenge to the Bank Treasury team’s assumptions, methodologies, stress scenario designs, and risk limits, consistent with the risk appetite and risk profile of the organizationPrepare and deliver ALCO and board and board risk oversight committee reporting on treasury risk exposures, trends, and stress testing outcomes; serve as escalation point for treasury risk issues to the CRO
• Hire and develop support for the treasury risk oversight team, defining team objectives, roles and responsibilities, and professional development goals
• Serve as primary second-line point of contact for OCC examiners, external auditors, and other senior external stakeholders on treasury risk topics

Minimum Qualifications 

• Bachelor's degree or equivalent practical experience in finance, economics, mathematics, or a related quantitative field
• 10+ years of experience in treasury risk management, asset-liability management, or a related financial risk function in a banking environment
• Demonstrated experience with independent oversight or challenge of interest rate risk, liquidity risk, or ALM, including stress testing and regulatory reporting
• Deep knowledge of OCC and interagency requirements and guidance on interest rate risk, liquidity risk, price risk, and capital management
• Direct experience working with OCC, Federal Reserve, FDIC, or other banking regulators on treasury risk or ALM matters

Preferred Qualifications

• Advanced degree (MBA, MS Finance, or equivalent) or professional certification (CFA, FRM, or similar)
• Experience at a de novo bank, OCC-chartered institution, or institution building treasury risk oversight from an early stage
• Experience with quantitative modeling techniques for EAR/EVE analysis, liquidity stress testing, and stress scenario design
• Experience leading or building a treasury risk team, including hiring and developing staff
• Familiarity with ALCO governance, committee reporting, and bank policy development for treasury risk

Position location Remote 

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE

#LI-Director 

The Team: 

Our Compliance team plays a critical role in mitigating risk and protecting Upstart’s growth and success, and as a Home Lending Compliance Associate Manager at Upstart, you will have a tremendous impact on this critical team.  Someone that is successful in this role will be a ‘Go Getter’ by partnering in change, re-defining policies and improving practices.  You’ll develop relationships of trust within the organization so that your role is a value add for the business unit. Your relevant skills and expertise will be an integral part of the discussion when addressing ways to further enhance the Compliance Management Systems and programs at Upstart. If you have previous compliance management experience and share our passion for consumer protection this could be the role for you.

How you’ll make an impact

• Advise Product, Ops, Engineering, Servicing, and Marketing on compliant mortgage (primarily HELOC) processes and requirements in a bank or bank-regulated environment.
• Review product designs, workflows, and disclosures to identify compliance risks, gaps, and control needs.
• Design, implement, and enhance controls and compliance processes for new and existing products.
• Own regulatory change management: monitor changes, assess impact, and drive implementation with accountable owners.
• Translate requirements into clear policies/procedures and tech-ready guidance for scalable implementation.
• Review marketing/advertising and channel content (web, email, SMS, contact center) for claims and disclosure compliance.
• Oversee HELOC servicing compliance, including statements, customer communications, complaints, error resolution, and third-party/vendor oversight.
• Run independent compliance monitoring; build KRIs and report trends and risks to leadership.
• Manage the issue lifecycle: document findings, assign owners, drive corrective actions, and validate closure.
• Deep-dive into systems and historical implementations to validate ongoing compliance and support remediation.

Minimum Qualifications 

• 5+ years in mortgage or home equity regulatory compliance (bank or bank-regulated environment preferred) with working knowledge of consumer protection laws (e.g., TILA/Reg Z, RESPA/Reg X, ECOA/Reg B, FCRA/Reg V, GLBA/Reg P, FDPA/Flood, Fair Housing Act, HMDA/Reg C, SAFE Act, UDAAP, EFTA/Reg E, SCRA) and applicable state laws.
• Proven ability to partner closely with Product, Engineering, Operations, and Servicing teams.
• Experience assessing risk, designing controls, and executing monitoring/oversight (including KRIs).
• Proactive, high-ownership mindset; comfortable diving into systems and past implementations.
• Strong judgment, escalation skills, and ability to influence stakeholders in fast-paced, ambiguous environments.
• Strong written and verbal communication skills.
• Bachelor’s degree or equivalent practical experience.
•  

Preferred Qualifications

• HELOC/home equity product experience.
• Experience across both bank and non-bank or fintech lending environments.
• Familiarity with digital origination and omni-channel communications (web, SMS, email, call center).
• Familiarity with tools like Slack, Google Workspace, and Jira.
• CRCM, JD, or other compliance certifications a plus.

Position location This role is available in the following locations: Remote

Time zone requirements The team operates on the East - West coast time zones.

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

What you'll love: 

• Competitive Compensation (base + bonus & equity)
• Comprehensive medical, dental, and vision coverage with Health Savings Account contributions from Upstart 
• Generous 401(k) plan with Upstart matching $2 for every $1 contributed, up to $15,000 per year
• Employee Stock Purchase Plan (ESPP)
• Life and disability insurance
• Generous holiday, vacation, sick and safety leave  
• Supportive parental, family care, and military leave programs
• Annual wellness, technology & ergonomic reimbursement programs
• Social activities including team events and onsites, all-company updates, employee resource groups (ERGs), and other interest groups such as book clubs, fitness, investing, and volunteering
• Catered lunches + snacks & drinks when working in offices

#LI-REMOTE

#LI-Associate 

The Team: 

The Fair Lending team sits within Upstart’s broader Risk and Compliance organization and plays a critical role in enabling responsible innovation while expanding access to affordable credit. The team partners closely with Legal, Product, Machine Learning, and Compliance to assess, manage, and mitigate fair lending risk across Upstart’s products, features, and services.

As the team lead, this role sets the strategic direction for the Fair Lending program, ensuring strong governance, consistency, and execution across initiatives. It leads and develops team members, drives cross-functional alignment, and serves as the primary point of accountability for maintaining a rigorous, resilient, and scalable fair lending framework.

How you’ll make an impact

• Own the fair lending risk assessment framework and provide independent challenge and guidance on control design across Upstart’s products, features, and services, identifying, evaluating, and escalating risks in close partnership with cross-functional stakeholders.
• Define and execute a comprehensive fair lending risk assessment program that supports regulatory compliance and Upstart’s mission to expand access to credit responsibly.
• Leverage data, analytics, and monitoring outputs to identify emerging risk themes and inform proactive mitigation strategies.
• Provide subject matter expertise, guidance, and coverage across fair lending initiatives, supporting execution and progress in a fast-moving, highly regulated environment.
• Lead cross-functional initiatives and working groups on a project basis, driving alignment, clarity, and risk-informed outcomes on complex and ambiguous issues.
• Influence decision-making by maintaining deep, current knowledge of regulatory expectations and industry best practices, and by translating risk insights into clear, actionable guidance.
• Communicate key fair lending risk themes, assessments, and insights to senior leadership and relevant governance forums, including the Fair Lending and board level committees.

Minimum Qualifications 

• 10+ years of progressive experience in fair lending and consumer protection compliance (e.g., in compliance, legal, audit, or risk management) within financial services or fintech, including direct ownership of ECOA/FHA programs, testing, and remediation.
• Deep, expert-level knowledge of fair lending and consumer protection laws and guidance (ECOA, FHA, FCRA, UDAAP, privacy) and how they apply across the credit lifecycle (marketing, underwriting, pricing, servicing, collections).
• Hands-on experience designing and operationalizing second-line risk management or compliance programs, including risk identification, control design, testing and monitoring, training and enablement, and third-party oversight.
• Proven track record leading enterprise-wide fair lending or consumer protection initiatives, influencing senior and cross-functional stakeholders, and engaging effectively with regulators, external auditors, or monitors on fair lending matters.

Preferred Qualifications

• Familiarity with modern predictive modeling techniques and associated governance, privacy, and fairness considerations
• Comfort partnering with technical teams to operationalize compliance expectations in technology-enabled environments
• Exceptional communication and presentation skills, with the ability to translate complex regulatory and risk topics for both technical and non-technical audiences.
• Experience implementing regulatory exam management tools, evidence repositories, or data-driven compliance workflows
• Strong organizational judgment, attention to detail, and ability to operate effectively under regulatory scrutiny
• JD, CRCM, or other advanced compliance or risk management certifications

Position location This role is available in the following locations: Remote 

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE

#LI-Director

The Team: 

Upstart’s Privacy and Data Governance Risk team is responsible for building and operating a scalable, risk-based privacy program that supports our AI-powered lending platform. The team partners closely with Engineering, Product, Data Analytics, Information Security, Legal, and Compliance to ensure responsible data use, regulatory alignment, and privacy-by-design across Upstart’s products and machine learning lifecycle.

As the Manager of Privacy Compliance  at Upstart, you will play a critical role in shaping and maturing the company’s privacy program. You will embed privacy controls into product lifecycles, AI/ML systems, computer systems, financial products, and data pipelines while enabling innovation and supporting compliance with complex financial and privacy regulations.

How you’ll make an impact

• Build, manage, and mature Upstart’s privacy program in alignment with consumer finance and privacy regulatory requirements.
• Partner with Product, Engineering, Data Analytics, Legal, Security, and Compliance to embed privacy-by-design into AI models, underwriting workflows, data pipelines, and new product features.
• Lead privacy risk and impact assessments (DPRAs/PIAs/DPIAs) for new product launches, machine learning models, new data sources, consumer-facing financial products, and emerging technologies.
• Support privacy aspects of model governance, explainability, algorithmic fairness reviews, and data lifecycle management.
• Maintain enterprise privacy documentation, including records of processing activities, data flow diagrams, and system-of-record artifacts to support audits and regulatory expectations.
• Collaborate with Security and Compliance on data safeguards, access controls, vendor assessments, and privacy incident response activities.

Minimum Qualifications 

• Bachelor’s degree in law, business, information systems, computer science, or related discipline (or equivalent experience).
• 3–7+ years of privacy, compliance, risk, or data governance experience within fintech, financial services, AI/ML, or other highly regulated environments.
• Strong working knowledge of:
• GLBA, FCRA, ECOA, CCPA/CPRA
• NIST Privacy Framework, ISO 27701
• Model governance and automated decision systems
• Experience conducting DPRAs/PIAs/DPIAs, managing privacy controls, and partnering with technical teams.
• Ability to translate regulatory requirements into actionable requirements for engineering and data science.

Preferred Qualifications

• Professional privacy certifications such as CIPP/US, CIPM, or CIPT.
• Experience supporting credit decisioning, lending, underwriting, fraud prevention, or financial operations.
• Familiarity with model governance, automated decision systems, and AI/ML lifecycle processes.
• Experience supporting regulatory examinations, internal audits, or external audits.
• Knowledge of modern cloud architectures, data platforms, machine learning tooling, and generative AI

Position location This role is available in the following locations: Remote 

Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.

#LI-REMOTE

#LI-MidSenior