Senior Risk Associate

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct comprehensive client risk assessments from start to finish, which includes gathering documents, performing interviews, scoring using weighted risk typology, drafting written assessments, determining tiers, and setting pre-launch conditions.

• Oversee program underwriting, which encompasses making recommendations on criteria, spending, transfer limits, and reserve limits, as well as periodic assessments.

• Manage third-party risk operations, involving vendor intake and tiering, reviewing due diligence and certification reports, rating control effectiveness, maintaining vendor risk registers, performing annual reviews, and tracking issues and incidents.

• Assist in the enterprise risk assessment and maintain the risk register by managing assessment inventories and calendars, testing control evidence, applying rating methodologies, and preparing materials for the Enterprise Risk Committee.

• Enhance rubrics, weights, questionnaires, templates, and standard operating procedures (SOPs).

• Test, implement, and optimize agentic tools throughout assessment workflows while documenting repeatable and defensible outputs.

• Define and communicate key performance indicators (KPIs) and key risk indicators (KRIs), highlighting concentration, trends, and thematic insights to leadership and oversight groups.

• Act as the evidence owner for requests from partner banks, auditors, and examiners.

• Provide mentorship and cross-train colleagues on assessment methodologies, scoring practices, and tooling.

⛳️ Requirements

• Proven experience in conducting risk assessments within fintech, payments, or banking, focusing on client or counterparty, third-party or vendor, and enterprise or operational risk.

• Solid understanding of underwriting principles, including financial statement analysis, liquidity and runway evaluation, loss and exposure tracking, and limit establishment.

• Proficiency in rubric-based scoring methodologies with the ability to apply them consistently and defend assigned ratings.

• Demonstrated history of independently managing discrete risk programs from beginning to end, including creating SOPs and establishing governing metrics.

• Capability to interpret ISO 27001, SOC 2 Type II, and PCI DSS AOC reports and translate findings into a residual risk position along with remediation requests.

• Comfortable working with AI-assisted or agentic tools, which includes testing, tuning, documenting, and justifying AI-assisted decisions to bank partners and regulators.

• Ability to create structure in ambiguous situations and discern when to escalate issues and collaborate.

• Strong writing skills that adhere to compliance standards for assessments, memos, and committee materials.

🏝️ Benefits

• Unlimited paid time off (PTO).

• 12 weeks of fully paid parental leave.

• A fully paid 4-week sabbatical, available after your 5-year anniversary.

• Flexibility to work from anywhere in the world for 4 weeks each year.

• 3% cashback on card purchases through your complimentary Privacy.com employee account.

• Health, vision, and dental insurance; HSA contribution match.

• 401(k) matching.

• Optional life insurance and short-term/long-term disability insurance.

• Commuter benefits for in-office employees.

• Catered lunch provided every Tuesday and Thursday for in-office employees.