Risk Management in United States

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. We are accepting applications for this position until 10/16/2026 Position Overview: At Freddie Mac, you will do meaningful work that helps build a stronger housing finance system and supports homeownership and rental housing opportunities across the nation. Launch your career by contributing to one of the most important risk management functions in the financial services industry. Our internships and graduate programs provide opportunities to tackle complex business challenges, collaborate with experienced professionals, and make an impact from day one. As an Enterprise Risk Business Intern, you will gain exposure to enterprise-wide risk management practices, emerging technology risks, AI governance, and strategic oversight activities while developing valuable analytical, communication, and leadership skills. Our Impact: Enterprise Risk Management (ERM) helps build and maintain a strong, effective, and efficient risk management framework across Freddie Mac. We provide independent oversight and assessment of financial and non-financial risks while promoting a strong risk culture throughout the organization. As risk management continues to evolve, our teams play an increasingly important role in overseeing areas such as artificial intelligence, model risk, fraud risk, data governance, and enterprise-wide risk frameworks. We work across business functions to ensure that risk management practices remain effective, scalable, and aligned with regulatory and busines

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. We are accepting applications for this position until 10/16/2026 Position Overview: At Freddie Mac, you will have meaningful work to help build a better housing finance system and support homeownership and rental housing opportunities across the nation. Our internship and graduate programs provide opportunities to tackle complex challenges, contribute to strategic initiatives, and build valuable relationships with industry professionals. As a Quantitative Risk Management Intern within Enterprise Risk Management (ERM), you will apply advanced analytical, technical, and quantitative skills to support risk management activities at one of the nation's largest financial institutions. You will gain hands-on experience working on real-world projects, collaborating across teams, and leveraging emerging technologies – including artificial intelligence and automation—to enhance risk management practices and business outcomes. Our Impact: Enterprise Risk Management (ERM) helps build and maintain a strong, effective, and efficient risk management framework across Freddie Mac. We provide independent oversight and assessment of financial and non-financial risks while promoting a culture of accountability, innovation, and sound risk management. Our quantitative teams leverage advanced analytics, data science, modeling, automation, and emerging technologies to support enterprise-wide decision-making and risk oversight. As AI and automation continue to transform the financial services industry, our teams p

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Director, Risk Management Overview: The Core Payments Strategy & Execution team tackles critical strategic opportunities and challenges across Mastercard’s most foundational business. This role is suited for a senior risk leader with a passion for payments, innovation, and operating at enterprise scale. Mastercard powers an inclusive, digital economy that makes transactions safe, simple, smart, and accessible for everyone, everywhere. Through secure data, trusted networks, and strong partnerships, we help individuals, businesses, financial institutions, and governments realize their greatest potential. Our Decency Quotient (DQ) shapes how we operate—guiding a culture of inclusion, collaboration, and integrity that enables better decisions, stronger innovation, and better outcomes. Role Description: The Director, Risk Management – Core Payments is a senior risk leader responsible for supporting the design, execution, and continuously strengthening the risk management framework supporting Mastercard’s Core Payments business. This role partners closely with business leadership and the second and third lines of defense to anticipate, mitigate, and remediate risk while enabling responsible growth. This position requires deep expertise in enterprise risk management, regulatory environments, and operational r

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations. Third-party ecosystem risk is a core part of how we keep Plaid safe—we vet the security of both the vendors we rely on and the customers and partners who connect to our platform, so trust runs in both directions. Role: You will run security risk assessments for Plaid’s third parties end-to-end—from intake and questionnaire through risk rating, findings, and tracked exceptions. You will assess the security posture of customers and partners onboarding to the platform with the same rigor we apply to vendors. You will keep the third-party risk lifecycle moving—risk tiering, reassessment cadence, remediation follow-through, and a clean, current risk register. You

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Senior Software Engineer, Trust (TPRM) - Job Description As a Senior Software Engineer on Vanta's Trust TPRM team, you'll build the full-stack product experiences and underlying data infrastructure that help enterprises manage vendor risk at scale — working across teams focused on vendor lifecycle management and vendor monitoring. Vanta's Trust TPRM (Third-Party Risk Management) team is building the products that make vendor risk management seamless for security and procurement teams. From vendor onboarding and lifecycle management to continuous monitoring and procurement integrations, we're creating the platform that helps Vanta customers understand, track, and mitigate third-party risk — a fast-growing, business-critical capability for modern enterprises. As a Senior Software Engineer, you'll contribute as a core member of either the Vendor Lifecycle or Vendor Monitoring Experience team. You'll design and ship full-stack features that directly shape how customers manage vendor relationships, collaborate with product and design partners, and bring real engineering ownership to a product area that's growing quickly within Vanta. What you’ll do as a Senior Software Engineer at Vanta: Design, build, and maintain full-stack features across the TPRM product surface, including vendor onboarding, lifecycle management, and monitoring workflows Contribute to the vendor data model and core platform abstractions that power TPRM products Write clean, well-tested code and actively participate in code reviews; uphold engineering quality standards Engage in architecture discussions and contribute to technical decision-making within your team

Citibank, N.A. seeks a Project Management Lead for its Irving, Texas location. Duties: Manage end-to-end delivery of wholesale credit risk and climate risk initiatives, overseeing projects lifecycle from requirements intake through execution and implementation. Define and monitor project milestones, dependencies to ensure timely project delivery and resolution of emerging risks or constraints. Partner with model developers in order to streamline, consolidate and redevelop wholesale credit risk models. Support model validation, audit readiness and project success by maintaining comprehensive documentation, remediation trackers, and evidence repositories. Coordinate with technology partners to optimize model integration, leading efforts to embed Comprehensive Capital Analysis and Review (CCAR) and International Financial Reporting Standard 9 (IFRS9) models into the library system. A telecommuting/hybrid work schedule may be permitted within a commutable distance from the worksite, in accordance with Citi policies and protocols. Requirements: Requires a Master’s degree, or foreign equivalent, in Finance, Business Analytics, or related field and 4 years of experience as a Project Manager, Financial Analyst, Accountant, or related position involving treasury and balance-sheet risk assessment, wholesale credit risk management and financial audit management. 4 years of experience must include: Risk management processes and frameworks in order to measure financial exposures under stress scenarios in model development; Understanding of control framework and regulatory expectations for model documentation, validation and periodic review; Project management including project structuring, development of timeline, implementation phases planning, resources allocation, identification of dependencies and bottlenecks, and escalation of issues; Data analysis and data quality assurance, including cleanliness of the data, completeness and accuracy, while ad

Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation financial services company and national bank using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world. The Role: This role plays a key role in contributing, developing, and maturing an industry-best Credit Risk Management organization across SoFi Technologies, Inc. The incumbent will architect comprehensive risk management capabilities for a rapidly growing bank holding company – ensuring robust defensive and offensive capabilities – maturing foundational risk identification/risk mitigation, risk management frameworks, and risk culture. The contributor will play an essential role in fostering regulatory readiness and maturing a strong effective challenge second-line Credit Risk function. The Credit Risk Oversight (2LOD) Senior Risk Analyst role is critical to success across SoFi Technologies, Inc., SoFi Bank, NA, and operating subsidiaries. The incumbent will contribute to the second-line oversight of Credit Risk across all SoFi’s lending products - Unsecured, Secured and Commercial Lending. The analyst will conduct credit/behavioral/financial analytics or predictive modeling to assess risks and opportunities for the bank portfolios and translate results into recommendations. The 2LOD Senior Risk Analyst will leverage internal and external data sources and technology capabilities in support of the oversight function. Perform analysis to research credit

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. As a member of Ramp's Risk Strategy & Operations team, you will leverage data to develop and optimize credit strategies. Credit is one of Ramp's most consequential products. Every policy change affects how customers can grow their usage, and how responsibly Ramp scales up while managing risk. Credit Risk Strategy owns these tradeoffs end to end. In this role, you will own or help build strategy across credit risk areas like credit limits, payment speed, and collections. You'll take ambiguous problems, get to the data, prototype the solution, and push the change with Product, Engineering, Data Science, Risk Operations, Finance, Customer Experience, and Compliance. AI fluency is required. We use AI as a core pillar of our risk management stack, and you will be prototyping and managing related Agents and tools. You should already be using tools like Claude Code, Codex, or similar AI tools to write code, explore data, prototype apps, automate workflows, and check your own work. You do not need to be a software engineer, but you do need to use AI to

About the Team At OpenAI, our User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving areas of work. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are seeking a Device Safety & Risk Operations Specialist to build the safety operating model for a new category of consumer hardware. This is a senior individual-contributor role for someone who can turn emerging product risks and incomplete requirements into practical workflows, controls, launch plans, and durable systems. You will define how product-safety incidents, critical escalations, regulated cases, and privacy-sensitive issues should be identified, investigated, escalated, resolved, and learned from. You will also establish operational requirements for case management, data access, decision logging, quality assurance, monitoring, and cross-functional response. You will stand up priority workflows through launch and early operations, then help transition them into durable homes across USRO and partner teams. The right person combines deep operational judgment with strong technical and hardware product fluency. They can move from executive-level risk framing to detailed workflow design, tabletop exercises, launch readiness, frontline guidance, and post-launch improvement. Location / work model: San Francisco, CA; hybrid, 3 days/week in-office. Please note: This role may involve exposure to sensitive or concerning material. Strong discretion, judgment, and resilience are essential. In This Role, You Will:

About the Team At OpenAI, our User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving areas of work. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are seeking a Device Safety & Risk Operations Specialist to build the safety operating model for a new category of consumer hardware. This is a senior individual-contributor role for someone who can turn emerging product risks and incomplete requirements into practical workflows, controls, launch plans, and durable systems. You will define how product-safety incidents, critical escalations, regulated cases, and privacy-sensitive issues should be identified, investigated, escalated, resolved, and learned from. You will also establish operational requirements for case management, data access, decision logging, quality assurance, monitoring, and cross-functional response. You will stand up priority workflows through launch and early operations, then help transition them into durable homes across USRO and partner teams. The right person combines deep operational judgment with strong technical and hardware product fluency. They can move from executive-level risk framing to detailed workflow design, tabletop exercises, launch readiness, frontline guidance, and post-launch improvement. Location / work model: San Francisco, CA; hybrid, 3 days/week in-office. Please note: This role may involve exposure to sensitive or concerning material. Strong discretion, judgment, and resilience are essential. In This Role, You Will:

About the Team At OpenAI, our User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a new team within USRO focused on building operational capacity for new, ambiguous, or fast-moving areas of work. The team helps define what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. As a Strategic Operations Lead, you will focus on large, cross-functional initiatives that require clear thinking, technical fluency, strong execution, and the ability to bring structure to undefined problems. About the Role We are seeking a Strategic Operations Lead to drive new and existing strategic operating builds across User Safety & Risk Operations. This is a senior IC role for someone who can turn broad, undefined priorities into clear operating models, launch plans, requirements, stakeholder alignment, documentation, reporting, and execution rhythms. This role will often support initiatives where OpenAI is developing new products or partnerships and the operating model is still being defined. These programs have a direct user safety and risk nexus because new deployment models can change what signals OpenAI can see, who owns response decisions, and how user-impacting risks are detected, escalated, and resolved. You will clarify what OpenAI owns, what partner teams own, what signals we can reliably monitor, how issues should be escalated, and how the workflow should evolve from launch support into a durable operating model. The right person is highly strategic and deeply practical. They can move from executive-level framing to detailed workflow design, stakeholder management, SOPs, launch readiness, ri

About the Team The compute infrastructure team runs the GPU fleet and large-scale compute clusters that serve the models backing ChatGPT and the API, while also supporting training workloads for our next generation models. We operate a large, modern GPU fleet and provide a unified platform for other OpenAI teams to seamlessly run production Applied AI and Research training workloads. We seek to learn from deployment and distribute the benefits of AI, while ensuring that this powerful tool is used responsibly and safely. Safety is more important to us than unfettered growth. About the Role You will be part of an engineer-first TPM team as a Technical Program Manager for Compute Infrastructure who owns the end-to-end delivery of large-scale GPU clusters, partnering with engineers to bring clusters online across external providers and partners. You’ll run a broad, parallel portfolio spanning hardware, networking, power, and cooling—driving execution, risk management, and crisp alignment from working teams through leadership to deliver production-ready capacity at scale. This role is based in San Francisco, CA. We use a hybrid work model of 3 days in the office per week and offer relocation assistance to new employees. In this role, you will: Lead end-to-end delivery of both New Compute SKUs and large-scale GPU clusters across an external partner ecosystem while supporting capacity planning for training and inference. Ability to contextually drive multi-threaded bring-up programs spanning hardware, networking, power, and cooling—owning plans, dependencies, and critical paths. Interface with chip providers to derisk long-term onboarding to new hardware platforms by working across kernels, comms, hardware, and scheduling engineering teams. Build and operationalize program mechanisms (roadmaps, milestones, risk registers, runbooks) that make delivery predictable at massive scale. Partner with engineering to improve cluster turn-up reliability, repeatability, and automation

Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow their revenue, and accelerate new business opportunities. Our mission is to increase the GDP of the internet, and we have a staggering amount of work ahead. That means you have an unprecedented opportunity to put the global economy within everyone’s reach while doing the most important work of your career. About the team Fraud Strategy is responsible for building scaled fraud mitigation systems that prevent fraud and protect the financial ecosystem, while minimizing disruption to good users. The fraud team’s mission is to protect Stripe, our users, and the broader financial ecosystem from actors who abuse Stripe accounts for financial gain. What you’ll do As a Fraud Strategist, you will be responsible for building strategies to mitigate fraud (buyer fraud, seller fraud and account fraud) on new and existing Stripe products. You will enable safer money movement for our users and help Stripe manage fraud risks intelligently. The stakes are high, and you will be up against ever-evolving challenges. You will face some of the most complex and dynamic problems at the company, and the nature of your work will evolve rapidly to combat new and more sophisticated challenges to Stripe's integrity in the financial ecosystem. You'll partner closely with Product, Engineering, Data Science, Operations and other Risk Strategy functions to ensure fraud controls are embedded in every Stripe product. Beyond protecting against fraud risk, you'll drive innovation in how Stripe approaches fraud management— staying ahead of emerging fraud trends and pushing the boundaries of what effective, scalable fraud risk management looks like at a global payments company. Responsibilities Monitor portfolio to identify, mitigate and predict risky behavior that could result in loss

The Assurance, Risk and Compliance (ARC) Initiatives team at MongoDB owns the governance and delivery of key cross-functional security risk and compliance initiatives. The team designs and executes programs that support compliance audits, risk assessments, common control frameworks, operating cadences, and executive reporting that strengthen the organization’s assurance, risk management and compliance objectives. The policy and controls governance pillar is responsible for the structure, standards and operating mechanisms that keep MongoDB’s security policies, standards, procedures, and controls governance processes current, aligned, auditable and scalable across the organization. This includes ownership of the policy lifecycle, common controls framework governance, issue management, and the review cadences and cross-functional coordination needed to maintain strong governance maturity and audit readiness. This role sits under the Assurance, Risk and Compliance function within the Global Security Office and reports to the Director of ARC Initiatives. This role will be based remotely in the United States Responsibilities: Scope of Ownership Policy governance program ownership, including policy lifecycle management, documentation standards, review and approval cadences, change tracking, and exception governance Controls governance ownership, including common controls framework lifecycle management, control harmonization, framework mapping, and processes that support audit readiness and scalable control oversight Governance over supporting systems and workflows, including Jira, GRC tooling, documentation repositories, and reporting structures, that enable consistent execution and visibility Issue management and remediation governance, including intake, triage, tracking, and reporting for timely closure of findings Executive-ready reporting and metrics for policy health, controls maturity, policy exceptions and broader program effectiveness Program Leadership Own