Risk Manager in United States

Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created by our global community of developers and creators. At Roblox, we’re building the tools and platform that empower our community to bring any experience that they can imagine to life. Our vision is to reimagine the way people come together, from anywhere in the world, and on any device. We’re on a mission to connect a billion people with optimism and civility, and looking for amazing talent to help us get there. A career at Roblox means you’ll be working to shape the future of human interaction, solving unique technical challenges at scale, and helping to create safer, more civil shared experiences for everyone. As a Senior QA Engineer, you will be the first dedicated QA hire for the Safety Engineering Group, which is responsible for building the infrastructure and policies that make Roblox the safest online community in the world. You will report to the QA Engineering Manager for Universal Apps and collaborate across the Safety organization to own end-to-end test strategies for high-stakes, 24/7 incident response systems and parent-facing safety features. This role is a unique opportunity to shape the quality culture of a company-level mandate from the ground up. You will: Partner with Engineering and Product to define and maintain comprehensive, risk-based test coverage for Safety features and systems. Own the end-to-end test strategy for Safety initiatives, including functional, regression, integration, and edge-case validation. Leverage and expand internal automation frameworks to automate critical user flows and drive API-first validation strategies. Identify high-impact automation opportunities and incorporate industry best practices to design robust, abuse-resistant test scenarios. Develop, track, and report on quality metrics (e.g., defect trends, coverage gaps) to proactively surface relea

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. We are accepting applications for this position until 10/16/2026 Position Overview: At Freddie Mac, you will do meaningful work that helps build a stronger housing finance system and supports homeownership and rental housing opportunities across the nation. Launch your career by contributing to one of the most important risk management functions in the financial services industry. Our internships and graduate programs provide opportunities to tackle complex business challenges, collaborate with experienced professionals, and make an impact from day one. As an Enterprise Risk Business Intern, you will gain exposure to enterprise-wide risk management practices, emerging technology risks, AI governance, and strategic oversight activities while developing valuable analytical, communication, and leadership skills. Our Impact: Enterprise Risk Management (ERM) helps build and maintain a strong, effective, and efficient risk management framework across Freddie Mac. We provide independent oversight and assessment of financial and non-financial risks while promoting a strong risk culture throughout the organization. As risk management continues to evolve, our teams play an increasingly important role in overseeing areas such as artificial intelligence, model risk, fraud risk, data governance, and enterprise-wide risk frameworks. We work across business functions to ensure that risk management practices remain effective, scalable, and aligned with regulatory and busines

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. We are accepting applications for this position until 10/16/2026 Position Overview: At Freddie Mac, you will have meaningful work to help build a better housing finance system and support homeownership and rental housing opportunities across the nation. Our internship and graduate programs provide opportunities to tackle complex challenges, contribute to strategic initiatives, and build valuable relationships with industry professionals. As a Quantitative Risk Management Intern within Enterprise Risk Management (ERM), you will apply advanced analytical, technical, and quantitative skills to support risk management activities at one of the nation's largest financial institutions. You will gain hands-on experience working on real-world projects, collaborating across teams, and leveraging emerging technologies – including artificial intelligence and automation—to enhance risk management practices and business outcomes. Our Impact: Enterprise Risk Management (ERM) helps build and maintain a strong, effective, and efficient risk management framework across Freddie Mac. We provide independent oversight and assessment of financial and non-financial risks while promoting a culture of accountability, innovation, and sound risk management. Our quantitative teams leverage advanced analytics, data science, modeling, automation, and emerging technologies to support enterprise-wide decision-making and risk oversight. As AI and automation continue to transform the financial services industry, our teams p

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology team is constantly evolving our firm’s IT infrastructure and engineering capabilities, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts who experiment and work to discover new ways to harness open-source solutions, modern cloud architectures, and sophisticated Artificial Intelligence (AI) solutions, while embracing enterprise agile methodologies. Our commitment to building and innovating in the AI space provides the framework intended to drive smarter decision making and enhance how we build and operate our platforms and applications. As a member of Point72’s Technology team, we encourage and support your professional development from day one—helping you advance your technical skills, contribute innovative ideas, and satisfy your own intellectual curiosity—all while delivering real business impact for our multi-billion-dollar global business. What you’ll do Develop and maintain the information security policy and standards library, aligning it with business priorities, regulatory expectations, and control objectives Lead independent assessments of the information security program, including regulatory examinations and third-party evaluations Identify technology risks across a complex business environment and drive mitigation aligned with our firm’s standards and control expectations Investigate data privacy inquiries and privacy-related events, assess business impact, and coordinate timely response activities Partner with technology, legal, compliance, and business stakeholders to translate risk findings into practical remediation plans Advise control owners on policy interpretation, risk treatment, and evidence expectations for assessments and examinations Prepare clear reports for management on team activity, emerging risks, remediation progress, and key decisions Maintain accurate risk, policy, priv

The AML Risk Management Senior Lead Analyst is a senior level position responsible for establishing internal procedures to prevent money laundering and assist in all matters concerning financial crimes in coordination with the broader AML team. The overall objective is to utilize established disciplinary knowledge to identify inconsistencies in data or result and formulate strategic recommendations on policies, procedures, and practices. Responsibilities: Execute and implement firm-wide AML risk management policy and strategic direction for the Markets Institutional line of business. Maintain AML compliance program for the business including assessment of risks and the development of policies, procedures, and governance, including those pertaining to an institutional broker dealer. Identify and assess risk, vulnerabilities, and opportunities for efficient and effective risk coverage. Work within team and across business/functional line management to assess complex issues, structure potential solutions, and drive effective resolution within permissible statutory and regulatory frameworks. Analyze data, prepare and present regional/global reports related to AML risk assessments. Monitor AML related issues and escalations with senior management and global partners. Evaluate and respond to escalated matters, further escalate as required, and advise senior management on next steps as needed. Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency. Qualifications

Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is democratizing software development by removing traditional barriers to application creation. About the role: Replit’s ecosystem is powered by an expanding array of external services and essential AI model partners. As our lead for Security Vendor Risk & Contract Reviews, you will architect and execute a risk management program focused on substantive evaluation rather than just processing checklists. You’ll analyze SOC 2 documentation, security assessments, and system architectures to determine actual risk profiles, collaborating with our Legal team to secure necessary contractual protections. This role reports to the Head of Security GRC and involves high-impact partnerships across Legal, Engineering, and Product teams. What You'll Do Run substantive third-party risk management (TPRM), independently evaluating real risk, not just processing questionnaire responses Review SOC 2 reports, pen test findings, and architecture documentation to form an independent view of vendor risk, extending the same rigor to AI/model providers Partner with Legal on vendor and AI contract terms, including DPAs, subprocessor agreements, and AI-specific provisions Review contracts for non-standard security language when flagged by Legal or deal desk, and recommend redlines Maintain the vendor and AI/model risk register, feeding findings into the company's master risk register Enable sales through maturing the customer trust program Build the capability for continuous monitoring of vendor ecosystem Required Skills & Experience 8+ years in third-party/vendor risk management, security risk, or a related GRC role Demonstrated ability to independently assess vendor risk rather than relying on questionnaire responses alone, fluent in reading SOC 2 reports, ISO certificates, pen test summaries, and architecture documentation Experi

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Director, Risk Management Overview: The Core Payments Strategy & Execution team tackles critical strategic opportunities and challenges across Mastercard’s most foundational business. This role is suited for a senior risk leader with a passion for payments, innovation, and operating at enterprise scale. Mastercard powers an inclusive, digital economy that makes transactions safe, simple, smart, and accessible for everyone, everywhere. Through secure data, trusted networks, and strong partnerships, we help individuals, businesses, financial institutions, and governments realize their greatest potential. Our Decency Quotient (DQ) shapes how we operate—guiding a culture of inclusion, collaboration, and integrity that enables better decisions, stronger innovation, and better outcomes. Role Description: The Director, Risk Management – Core Payments is a senior risk leader responsible for supporting the design, execution, and continuously strengthening the risk management framework supporting Mastercard’s Core Payments business. This role partners closely with business leadership and the second and third lines of defense to anticipate, mitigate, and remediate risk while enabling responsible growth. This position requires deep expertise in enterprise risk management, regulatory environments, and operational r

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Washington D.C., London and Amsterdam. Team: The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners.We partner closely across the company to ensure Plaid’s platform remains secure, resilient, and aligned with industry and regulatory expectations. Third-party ecosystem risk is a core part of how we keep Plaid safe—we vet the security of both the vendors we rely on and the customers and partners who connect to our platform, so trust runs in both directions. Role: You will run security risk assessments for Plaid’s third parties end-to-end—from intake and questionnaire through risk rating, findings, and tracked exceptions. You will assess the security posture of customers and partners onboarding to the platform with the same rigor we apply to vendors. You will keep the third-party risk lifecycle moving—risk tiering, reassessment cadence, remediation follow-through, and a clean, current risk register. You

At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. Senior Software Engineer, Trust (TPRM) - Job Description As a Senior Software Engineer on Vanta's Trust TPRM team, you'll build the full-stack product experiences and underlying data infrastructure that help enterprises manage vendor risk at scale — working across teams focused on vendor lifecycle management and vendor monitoring. Vanta's Trust TPRM (Third-Party Risk Management) team is building the products that make vendor risk management seamless for security and procurement teams. From vendor onboarding and lifecycle management to continuous monitoring and procurement integrations, we're creating the platform that helps Vanta customers understand, track, and mitigate third-party risk — a fast-growing, business-critical capability for modern enterprises. As a Senior Software Engineer, you'll contribute as a core member of either the Vendor Lifecycle or Vendor Monitoring Experience team. You'll design and ship full-stack features that directly shape how customers manage vendor relationships, collaborate with product and design partners, and bring real engineering ownership to a product area that's growing quickly within Vanta. What you’ll do as a Senior Software Engineer at Vanta: Design, build, and maintain full-stack features across the TPRM product surface, including vendor onboarding, lifecycle management, and monitoring workflows Contribute to the vendor data model and core platform abstractions that power TPRM products Write clean, well-tested code and actively participate in code reviews; uphold engineering quality standards Engage in architecture discussions and contribute to technical decision-making within your team

At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. Position Overview: At Freddie Mac, our mission of Making Home Possible is what motivates us, and it’s at the core of everything we do. Since our charter in 1970, we have made home possible for more than 90 million families across the country. Join an organization where your work contributes to a greater purpose. This role is in Governance and Business Services (GBS) and is part of 1st Line within the Multifamily Division at Freddie Mac in McLean, VA. GBS leads the division in managing operational risk, in compliance with the Corporate Enterprise Risk Management framework. As an Operational Risk & Controls Senior in GBS, you will support Multifamily Process Owners in managing third-party supplier risk by using an integrated approach to operational risk frameworks, collaborating with the 2nd line, 3rd line, and other business lines counterparts. You will engage with key business process owners to assess and monitor inherent risks associated with suppliers, ensuring compliance with regulatory standards and internal controls. This role also offers an excellent opportunity to gain insight into our Multifamily business. The responsibilities are time-sensitive and carry a high level of visibility both within the Multifamily division and across the company. Our Impact: Our team leads third-party risk management for the Multifamily division, serving as trusted advisors to business process owners. We ensure compliance with all corporate third-party risk policies, standards, and procedures, and proactively partner with stakeholders across all three lines to assess and mitigate supplier risks. We oversee

Given heightened expectations from regulators and a goal to build a strong and consistent global control environment, Citi continues to enhance its business governance framework and has created the Enterprise Data group. Enterprise Data is a critical component of Citi’s first line of defense for wholesale and counterparty credit risk management and works with Independent Risk teams to ensure best-in-class risk and controls, as well as client responsiveness. Key responsibilities of the group include credit analysis, documentation, risk identification, exposure monitoring and stress testing. Enterprise Data coordinates with credit management groups across institutional client businesses to ensure full alignment on business and regulatory goals, as well as consistency and best practices. The Counterparty Credit Risk (CCR) project execution team within Enterprise Data is responsible for building tools to: Provide in-depth quantitative or qualitative analysis to solve business problems and develop new, innovative solutions Build tools to help measure, monitor and control counterparty risk for institutional clients and Portfolios and businesses, with a focus on counter-party and collateral risk to ensure the risks are being properly measured and controlled in accordance with the Firm’s risk policies. Responsibilities: As a Product Developer working in CCR project team, individual will be expected to Lead strategic BAU and Regulatory projects primarily impacting Counterparty Credit Risk exposure measures for traded product markets business Develop and enhance tools for the measurement, monitoring and reporting of counterparty exposure including Stress testing - Net Stressed Exposure (NSE), Potential Future Exposure (PFE), Settlement Risk, Intraday risk and participate in project management of strategic risk infrastructure development.</

About Ramp Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $200B in annualized spend flows in and out of 70,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books. The problems are high-stakes, data-dense, and unforgiving. We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome. The median Ramp customer saves 5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same. If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it. As a member of Ramp's Risk Strategy & Operations team, you will leverage data to develop and optimize credit strategies. Credit is one of Ramp's most consequential products. Every policy change affects how customers can grow their usage, and how responsibly Ramp scales up while managing risk. Credit Risk Strategy owns these tradeoffs end to end. In this role, you will own or help build strategy across credit risk areas like credit limits, payment speed, and collections. You'll take ambiguous problems, get to the data, prototype the solution, and push the change with Product, Engineering, Data Science, Risk Operations, Finance, Customer Experience, and Compliance. AI fluency is required. We use AI as a core pillar of our risk management stack, and you will be prototyping and managing related Agents and tools. You should already be using tools like Claude Code, Codex, or similar AI tools to write code, explore data, prototype apps, automate workflows, and check your own work. You do not need to be a software engineer, but you do need to use AI to

About the Team At OpenAI, our User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving areas of work. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are seeking a Device Safety & Risk Operations Specialist to build the safety operating model for a new category of consumer hardware. This is a senior individual-contributor role for someone who can turn emerging product risks and incomplete requirements into practical workflows, controls, launch plans, and durable systems. You will define how product-safety incidents, critical escalations, regulated cases, and privacy-sensitive issues should be identified, investigated, escalated, resolved, and learned from. You will also establish operational requirements for case management, data access, decision logging, quality assurance, monitoring, and cross-functional response. You will stand up priority workflows through launch and early operations, then help transition them into durable homes across USRO and partner teams. The right person combines deep operational judgment with strong technical and hardware product fluency. They can move from executive-level risk framing to detailed workflow design, tabletop exercises, launch readiness, frontline guidance, and post-launch improvement. Location / work model: San Francisco, CA; hybrid, 3 days/week in-office. Please note: This role may involve exposure to sensitive or concerning material. Strong discretion, judgment, and resilience are essential. In This Role, You Will:

About the Team At OpenAI, our User Safety & Risk Operations (USRO) team helps protect our products and users from abuse, fraud, safety risks, and other forms of misuse. We operate at the front line of real-world safety and risk management, translating user and operational signals into timely decisions, effective interventions, and improvements to our systems. This role sits on a team focused on building operational capacity for new, ambiguous, and fast-moving areas of work. The team defines what needs to be built, creates the operating model to support it, and works with partner teams to make the work scalable and durable over time. About the Role We are seeking a Device Safety & Risk Operations Specialist to build the safety operating model for a new category of consumer hardware. This is a senior individual-contributor role for someone who can turn emerging product risks and incomplete requirements into practical workflows, controls, launch plans, and durable systems. You will define how product-safety incidents, critical escalations, regulated cases, and privacy-sensitive issues should be identified, investigated, escalated, resolved, and learned from. You will also establish operational requirements for case management, data access, decision logging, quality assurance, monitoring, and cross-functional response. You will stand up priority workflows through launch and early operations, then help transition them into durable homes across USRO and partner teams. The right person combines deep operational judgment with strong technical and hardware product fluency. They can move from executive-level risk framing to detailed workflow design, tabletop exercises, launch readiness, frontline guidance, and post-launch improvement. Location / work model: San Francisco, CA; hybrid, 3 days/week in-office. Please note: This role may involve exposure to sensitive or concerning material. Strong discretion, judgment, and resilience are essential. In This Role, You Will:

About the Team OpenAI’s mission is to ensure that general-purpose artificial intelligence benefits all of humanity. We believe that achieving our goal requires effective engagement with public policy stakeholders and the broader community impacted by AI. Accordingly, our Global Affairs team builds authentic, collaborative relationships with public officials and the broader AI policymaking community to inform and support our shared work in these domains. We ensure that insights from policymakers inform our work and – in collaboration with our colleagues and external stakeholders – seek to shape policy so that it aligns with and supports our mission. About the role OpenAI is looking for an Applied Risk Standards Specialist to lead standards work for applied risk in applications, including mental health, youth safety, age assurance, functional efficacy, reliability, and privacy-related risks. You will help turn internal research, safety policies, and evaluation methods into technically sound, measurable, and adaptable standards that build public trust and support responsible deployment. This role sits within our AI standards and global assurance function in Global Affairs. Working closely with Safety Systems, Research, Product, Model Policy, Legal, and third-party evaluators, you will author proposals, negotiate requirements, and represent OpenAI in priority standards bodies. You will take on the drafting and external engagement needed to advance this work, enabling technical experts to focus on the underlying methods and evidence. You will also bring emerging requirements back into internal planning before they become established expectations. Alongside this primary portfolio, you will support the AI Standards and Global Assurance Lead on frontier AI assurance, contributing to risk-management standards, evaluation and benchmarking requirements, and approaches to independent assessment. The role connects technical practice with external standards. It does not replace t