Senior Manager, Technology Risk
Job description
About the role
You own the technology risk narrative for a new digital bank. Daily work means independent oversight and steady guidance for technology and security teams. You translate complex risk signals into clear direction for executives and regulators.
Key facts
What you'll do
Set the second line technology risk tone while guiding controls for cloud and operations. Champion oversight of cybersecurity and incident response through calm, steady leadership. Own the FFIEC CAT and technology risk assessments aligned with OCC cloud guidance. Become the main second line connector for OCC examiners, audit, and external stakeholders. Grow a small technology risk team by defining roles, expectations, and career paths. Partner with first line technology, security, and compliance to weave risk into daily governance. Drive the design of Upstart's technology risk framework for the bank's unique digital model. Report clearly to risk committees, senior leadership, and the board on technology risk posture.
Requirements
You must have experience guiding technology and information security risk programs inside a bank. You should understand OCC expectations for technology risk, cloud computing, and third party oversight. You need proven skill conducting technology risk assessments and using the FFIEC CAT or similar frameworks. You must communicate complex risk topics to boards, regulators, and non-technical audiences. You require experience managing or mentoring a small risk or security focused team.
Upstart context
At Upstart, we are united by a mission to radically reduce the cost and complexity of borrowing for all Americans. Every day, we bring creativity, experimentation, and advanced AI to reshape access to credit, helping millions move forward financially with clarity and confidence. As the leading AI lending marketplace, we partner with banks and credit unions to expand access to affordable credit through technology that is both radically intelligent and deeply human. Our platform runs over one million predictions per borrower using more than 1,800 signals, powering smarter, fairer decisions for millions of customers. The numbers hint at impact, yet every idea, every voice, and every contribution moves us closer to a world where credit never stands between people and their financial progress. We are proudly digital-first, giving most Upstarters the flexibility to do their best work from wherever they thrive, alongside teammates across 80+ cities in the US and Canada. Digital-first does not mean distant. We are intentional about in-person connection through team onsites, planning sessions, and moments that spark creativity and trust. And whether you choose to work primarily from home or collaborate in-person from one of our offices in Columbus, Austin, the Bay Area, or New York City (opening Summer 2026), you will have the support to work in the way that works best for you.
What makes you qualified
You must have direct experience providing independent second line oversight for technology and information security risk inside a banking environment. Your work should show familiarity with regulatory expectations from the OCC, FDIC, and FFIEC related to technology risk, cloud services, and third party risk management. You have a track record of conducting technology risk assessments and completing the FFIEC CAT or equivalent frameworks with attention to controls and evidence. You communicate complex risk topics clearly to diverse audiences including boards, regulators, and technical and non-technical stakeholders. You have managed or mentored a small team of risk or security professionals, setting direction, defining roles, and supporting career growth.
What you will gain
You will lead the design and execution of a technology risk program for a newly forming digital bank. You will build and guide a focused team while collaborating closely with first-line technology, security, compliance, and enterprise risk functions. Your work will directly support regulatory interactions and shape how the bank identifies, prioritizes, and responds to technology and security risks. You will report on technology risk posture to risk committees, senior leadership, and the board.
Practical notes
The role is fully remote with flexibility; occasional travel may apply. The selected candidate will work standard business hours with some after-hours support for critical reviews. Experience supporting examiners, audit, and external inquiries in a banking context is valued.
Tools and standards
About Upstart
Online lending marketplace connects borrowers with investors. Company uses digital tools to handle loan applications and funding. Focus remains on personal credit and employment data. Service aims to speed approval decisions. Operations support multiple products. Team works on assessment models. Goal involves expanding access to credit. Platform seeks to simplify financial requests for users. Members analyze risk using technology. Program helps manage loan lifecycle from application to payout.