Manager, Vendor Risk Management
at Upgrade
San Francisco, United States
Upgrade helps customers move in the right direction with affordable and responsible financial products. Since 2017, we’ve helped over 7 million customers access over $40 billion in consumer credit. With a relentless focus on improving our customers' financial well-being, we build products that put more money in their pocket and support their journey toward a better financial future. We’re backed by some of the most prominent technology investors and were most recently valued at $6.3B.
We’re consistently recognized for our collaborative and inclusive culture. Most recently, we were named one of the World’s Top Fintech Companies by CNBC, Best Places to Work by Built In, Best Places to Work by the San Francisco Business Times, America’s Greatest Workplaces by Newsweek, Best Startup Employer by Forbes, and Healthiest Employers by Phoenix Business Journal.
We’re looking for new team members who get excited about designing and delivering new and better products. Come join us and help build a better financial future for millions of people.
About the Role:
Upgrade is seeking a Manager to evaluate and oversee our business-critical vendors, ensuring their controls align with, and properly address, the risks associated with their services. You'll play a key role in protecting Upgrade by conducting thorough due diligence and ongoing monitoring of our third-party relationships. This role requires a strong collaborator who can work effectively with both internal stakeholders and external partners.
What You'll Do:
- Conduct risk-based reviews of critical vendors, evaluating everything from policies and procedures to financial health, security programs, operational capabilities, and performing testing.
- Partner with internal business owners, Legal, Compliance, Product, and Information Security teams, as well as external vendors, to gather all necessary documentation and facilitate expert reviews.
- Prepare clear and concise summaries of vendor materials, including diligence reviews, monitoring activities, testing results, and public records research (e.g., regulatory actions, litigation, negative news, complaints).
- Assist with onboarding new vendors including performing risk assessments, diligence, and direct follow-up with vendors
- Identify, escalate, and monitor vendor issues to ensure timely resolution.
- Ensure all vendor reviews and monitoring plans are accurately maintained and up-to-date.
Skills We're Looking For:
- 3-5 years of experience in vendor management, third-party risk management, or compliance
- Ability to take ownership of and navigate highly detailed and complex processes.
- Demonstrated strong project management, time management, prioritization, critical thinking, and analytical abilities.
- Excellent verbal and written communication skills, capable of conveying complex and sensitive issues clearly and persuasively to both internal and external audiences.
- A natural curiosity and the confidence to ask insightful, clarifying questions.
- Demonstrated experience navigating regulatory requirements and control frameworks (e.g., SOC, PCI, third-party audits) in financial services and/or fintech environments.
- Prior experience with Zip, Upguard, Ironclad, JIRA, Confluence, AI & LLMs
What We Offer You:
- Competitive salary and stock option plan
- 100% paid coverage of medical, dental and vision insurance
- Flexible PTO
- Competitive 401(k) and RRSP program
- Opportunities for professional growth and development
- Paid parental leave
- Health & wellness initiatives
The compensation range of this position in San Francisco, CA is USD $140,000 - $160,000 annually plus equity and benefits. Within this range, an individual's base pay will be dependent on a variety of factors, including without limitation, job-related knowledge, skills, education, and experience.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Upgrade does not accept unsolicited resumes from staffing agencies, search firms, or any third parties. Any resume submitted to any employee of Upgrade without a prior written agreement in place will be considered the property of Upgrade, and Upgrade will not be obligated to pay any referral or placement fee. Agencies must obtain advance written approval from Upgrade's Talent Acquisition department to submit resumes and only in conjunction with a valid, fully executed agreement. English is required for all positions, as it involves interacting with staff at Upgrade's offices worldwide.