Remote Third Party Risk Management Jobs
Remote Third Party Risk Management jobs are open across the US at companies hiring remotely, from entry-level roles at remote-first startups to senior roles on large distributed teams, with employers like CVS Health, Vanta, and Upstart hiring right now. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 56+ Remote Third Party Risk Management jobs











About Upstart
At Upstart, we’re united by a mission that matters: to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence.
As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that’s both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. But the numbers only hint at the impact. Every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress.
We’re proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first doesn’t mean distant. We’re intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you’ll have the support to work in the way that works best for you.
If you’re energized by tackling meaningful problems, excited to innovate with purpose, and motivated by work that truly matters, we’d love to hear from you.
The Team:
Upstart’s Risk team is building its second line of defense function in support of its application to establish Upstart Bank, N.A., a de novo national bank. The team is responsible for Upstart’s enterprise risk management program and risk governance, providing independent oversight and credible challenge across key risk categories including operational risk, third-party risk, technology and information security risk, treasury risk, and compliance risk. The Risk team partners closely with business leaders, executive management, and the Board to ensure material risks are effectively identified, assessed, monitored, and governed in alignment with OCC, FDIC, and interagency regulatory expectations.
As the Manager, Third Party Risk Management at Upstart, you will lead the day-to-day execution of the bank’s third-party risk management program and oversee a team responsible for risk assessments, due diligence, ongoing monitoring, and vendor oversight activities. You will play a key role in ensuring the program remains scalable, exam-ready, and aligned with evolving regulatory expectations while supporting the growth of Upstart Bank.
How you’ll make an impact
- Lead execution of the bank’s end-to-end third-party risk management program, including risk-tiered due diligence, onboarding risk assessments, ongoing monitoring, and offboarding activities across all vendor tiers.
- Manage and develop the Third-Party Risk Management team by setting priorities, providing coaching, and ensuring consistent, high-quality risk assessments and oversight activities.
- Serve as the primary second-line escalation point for elevated or complex third-party risk matters, providing risk-based recommendations and ensuring issues are appropriately documented, tracked, and resolved.
- Maintain and enhance third-party risk management frameworks, risk tiering methodologies, assessment templates, and governance processes to support a scalable, risk-based program.
- Partner with Legal, Compliance, Information Security, Affiliate Risk, and business stakeholders to ensure consistent application of third-party risk standards throughout the vendor lifecycle.
- Lead regulatory examination readiness and support responses to OCC, FDIC, internal audit, and external audit inquiries related to third-party risk management.
Minimum Qualifications
- Bachelor’s degree or equivalent practical experience.
- 6+ years of experience in third-party risk management, compliance, audit, operational risk, or a related risk discipline within a banking or financial services environment.
- Experience leading a third-party risk management program, including risk assessments, due diligence reviews, ongoing monitoring, and issue management across a multi-vendor portfolio.
- Knowledge of OCC, FDIC, and interagency guidance related to third-party relationships and risk management, including the 2023 Interagency Guidance on Third-Party Relationships: Risk Management.
- Experience assessing and managing risks associated with multiple third-party relationship types, including suppliers, lending partners, affiliates, and technology service providers.
Preferred Qualifications
- Direct experience supporting OCC or FDIC regulatory examinations related to third-party risk management.
- Experience leading or developing risk, compliance, audit, or third-party risk professionals.
- Knowledge of affiliate risk oversight requirements, including Regulation W and related regulatory expectations.
- Experience operating within a fintech, digital banking, or technology-intensive environment, including oversight of cloud, SaaS, and other technology service providers.
- Experience using governance, risk, and compliance (GRC) platforms to support third-party risk assessments, issue management, workflow automation, and ongoing monitoring activities.
Position location This role is available in the following locations: Remote
Time zone requirements The team operates on the East/West coast time zones.
Travel requirements As a digital first company, the majority of your work can be accomplished remotely. The majority of our employees can live and work anywhere in the U.S but are encouraged to to still spend high quality time in-person collaborating via regular onsites. The in-person sessions’ cadence varies depending on the team and role; most teams meet once or twice per quarter for 2-4 consecutive days at a time.
At Upstart, your base pay is one part of your total compensation package. The anticipated base salary for this position is expected to be within the below range. Your actual base pay will depend on your geographic location–with our “digital first” philosophy, Upstart uses compensation regions that vary depending on location. Individual pay is also determined by job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
In addition, Upstart provides employees with target bonuses, equity compensation, and generous benefits packages (including medical, dental, vision, and 401k).
United States | Remote - Anticipated Base Salary Range
$145,300—$231,300 USD
What you'll love
At Upstart, our benefits are designed to support your health, financial well-being, family, and personal growth. Here’s what you can expect:
- Competitive compensation, including base pay, bonus opportunities, and annual equity grants that vest quarterly
- Retirement benefits to help you plan for the future, including a 401(k) or Group Retirement Savings Plan with a company match of $2 for every $1 contributed, up to $15,000 annually (USD in the US, CAD in Canada)
- Employee Stock Purchase Plan (ESPP) with discounted stock purchase options for eligible employees (US only)
- Comprehensive health coverage designed to support you and your family, including medical, dental, vision, and wellness resources for US and supplemental health coverage for Canada.
- Health Savings Account contributions from Upstart for eligible plans (US only)
- Income protection benefits, including life insurance and disability coverage for added financial security
- Paid time off, sick leave, and company holidays, in line with local requirements
- Paid family and parental leave to support caregiving and major life moments (duration varies by country)
- Family-centered benefits to support fertility, parenthood, and caregiving needs
- Employee Assistance Program (EAP) offering mental health support and life-centered resources
- Financial wellness resources, including access to financial planning tools and a financial concierge service (US Only)
- Annual wellness allowance to support your physical and emotional well-being and personal development, based on what matters most to you
- Annual productivity allowance to invest in relevant tools and resources you need to do your best work, no matter where you work from
- Connection and community through team events, all-company updates, and employee resource groups (ERGs)
- Onsite perks, including catered lunches and fully stocked micro-kitchens when working from one of our offices in the Bay Area, Austin, Columbus, and New York City (opening Summer 2026!)
For roles based in Canada, please note that we are not currently able to hire in Quebec.
Upstart is a proud Equal Opportunity Employer. Just as we are dedicated to improving access to affordable credit for all, we are committed to inclusive and fair hiring practices.
If you require reasonable accommodation in completing an application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please email candidate_accommodations@upstart.com
See All 56 Remote Third Party Risk Management Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Third Party Risk Management Job Market
Who's Hiring
- CVS Health51

- Vanta1

- Upstart1

- L'Oréal1

- HealthEquity1

Top Industries Hiring
- Healthcare & Medical Services52
- Insurance2
- Cybersecurity1
- Consumer Goods1
- Technology & Software1
What Employers Look For
The qualifications that appear most often in remote third party risk management jobs.
- Experience conducting vendor risk assessments and due diligence reviews
- Familiarity with risk frameworks such as NIST, ISO 27001, or SOC 2
- Ability to analyze contracts and service agreements for compliance gaps
- Proficiency with GRC platforms such as Archer, ServiceNow, or OneTrust
- Relevant certification such as CTPRP, CISA, or CRISC preferred
- Bachelor's degree in business, information security, finance, or a related field
Tips for Your Remote Third Party Risk Management Job Search
Tailor your resume to framework language
Hiring managers in this field scan for specific frameworks like NIST, ISO 27001, and SOC 2. Mirror the exact language from each job posting in your resume's experience bullets so your background maps directly to what the role requires.
Quantify your vendor portfolio scope
Vague claims about managing vendors won't differentiate you. State the number of third-party relationships you assessed, the risk tiers involved, and any reduction in critical findings you drove. Concrete scope signals hands-on operational experience.
Target roles by industry vertical carefully
Third party risk management requirements differ sharply between financial services, healthcare, and tech. A banking role often demands OCC or Fed guidance familiarity, while a healthtech role prioritizes HIPAA vendor compliance. Filter openings by vertical before applying.
Apply early to roles that fit
Migrate Mate lists third party risk management openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare a risk scenario for interviews
Most third party risk management interviews include a case question about a vendor that fails a control assessment mid-contract. Walk through your decision framework out loud: escalation path, remediation timeline, and when to recommend offboarding. Rehearse this before every round.
Negotiate scope before accepting an offer
Before signing, clarify whether the role owns policy-writing, tooling decisions, and executive reporting, or just conducts assessments. Scope ambiguity is common in this function. Asking upfront signals maturity and helps you avoid a role narrower than the title suggests.
Remote Third Party Risk Management Jobs: Frequently Asked Questions
How do I get a remote third party risk management job?
Target companies that already run distributed teams, since they hire remotely by default and know how to onboard someone they never meet in person. Remote third party risk management employers screen hard for self-direction and clear written communication on top of the core skills, so show evidence you can own work without someone over your shoulder. Apply to the openings above that match your experience.
Which companies hire remote third party risk managements?
Remote third party risk management roles are posted by CVS Health, Vanta, and Upstart and others right now, based on current remote listings on Migrate Mate as of June 2026. Remote-first firms and large companies running distributed teams post the most remote third party risk management roles.
Can you get a remote third party risk management job with no experience?
Yes, but it is harder than an on-site role, because remote work expects you to operate independently from the start. Entry-level remote third party risk management openings do exist, especially at remote-first companies, and a portfolio of real work helps more than a long resume. Applying broadly to the roles that fit improves your odds.
Do you need a degree for remote third party risk management jobs?
Not always. Many employers hire remote third party risk managements on demonstrated skills and prior work rather than a specific degree, though some larger companies still prefer one. Showing relevant results matters more than a credential for most remote third party risk management roles.
Which industries hire the most remote third party risk managements?
The sectors hiring the most remote third party risk managements are Healthcare & Medical Services, Insurance, and Cybersecurity, based on current remote listings on Migrate Mate as of June 2026. These sectors run distributed teams and hire third party risk managements remotely most consistently.
See All 56 Remote Third Party Risk Management Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs