Third Party Risk Manager

Few people get to build a bank from scratch. Even fewer get to build one at a moment when banking itself is being reinvented.

The Dollar is the best product in the history of the world - there is infinite global demand. But international fintechs and banks are left with two unsatisfying options to choose from: Either build on legacy correspondent banks that are slow and unreliable, or interface with middleware providers that neither move nor hold the dollars directly, but instead rely on underlying legacy banks themselves. At Augustus, we collapse the stack by combining two things: A real, national bank charter (in organization), and Marble, our proprietary core banking system, built around intelligence, made of code.

We are a group of ex-founders, founding employees of unicorns, and people who dropped out of university because they believe this is an industry and career defining opportunity. We are backed with more than $200M from Peter Thiel's Valar Ventures, Tiger Global, Hummingbird, QED, Creandum, and the founders of Nubank, Ramp, Deel, Circle, Fluidstack, Fuse, and Etched.

We are regulated in Europe and live with Euro and Stablecoin clearing today. Now, we are building the US team from the ground up, while continuing to grow rapidly in Europe.

The Role

You own the mechanics that make the TPRM program run day to day. You are the person who keeps the vendor and partner inventory reconciled, moves relationships through onboarding and due diligence, coordinates SME reviews across every function that touches third-party risk, tracks BCDR posture on every critical vendor, and keeps the TPRM issues pipeline current.

You own:

• Inventory: maintaining the third-party inventory and running the quarterly reconciliation against payment and contracting data (you do not own payment/contracting controls yourself — you reconcile against them).

• Onboarding: running new vendor and partner relationships through intake and onboarding.

• Initial & Ongoing Due Diligence: executing initial due diligence at onboarding and ongoing due diligence on the recurring schedule for existing relationships.

• Audit Oversight: tracking and coordinating third-party audit requirements and following up on findings.

• SME Reviews: coordinating and tracking risk-based reviews with subject matter experts across Information Technology, Information Security, BSA/AML & OFAC, Compliance (Consumer & Regulatory), Credit, Finance, and Legal.

• BCDR: collecting and tracking RTO & RPO assessments for critical vendors, and maintaining exit plans.

• Fourth Party Due Diligence: extending due diligence downstream to critical fourth parties where required.

• Vendor DDQ & Partner DDQ: administering and tracking due diligence questionnaires for both vendor and partner relationships.

• SLA: tracking service level agreements and monitoring performance against them.

• Issues: maintaining the TPRM issues log from identification through remediation and closure.

• Reverse Due Diligence: supporting due diligence requests that come from partners and counterparties assessing Augustus.

 

Your first 90 days

• Weeks 1-4: You learn how third-party risk actually runs today — what's in (and missing from) the inventory, how onboarding and due diligence really move through the pipeline, which SME reviews are current versus overdue, what BCDR and exit plan documentation exists for critical vendors, and where the issues log breaks down.

  Weeks 5-8: You take over the operational cadence. Onboarding and due diligence are moving on schedule. The inventory reconciliation is running quarterly without prompting. SME reviews are tracked and chased across all seven functions. DDQs are going out and coming back on time.

  Weeks 9-12: You start closing gaps — cleaning up the BCDR and exit plan documentation for critical vendors, tightening fourth-party due diligence coverage, and getting the TPRM issues log to reflect true status. Leadership trusts the inventory and the pipeline status without double-checking them.

 

Who Will Thrive At Augustus

We believe that throwing smart people with high agency at big problems produces the best outcomes. We’re building a modern correspondent bank, and we win by having a better team. The people who succeed here share the following traits:

• American Dream: You’d rather shoot for gold than settle for mediocrity. You pick the harder goal and stay optimistic when the odds are against you. If it feels easy, we aimed too low.

• Live Player: You don’t need permission. You rebuild what’s broken without being asked, challenge how things are done, and move before the perfect moment.

• Ever to Excel: You can’t accept good enough and you take your work personally. When it matters, you do what it takes and keep raising the bar for yourself and your team.

• Genuine: You play for the company, not your title or turf. Low ego, low drama, no politics. You say it straight, also upwards and always assume good intent.

 

This role is for you if:

• You get satisfaction from chasing down documentation, closing out a due diligence file, and keeping an inventory clean and reconciled.

• You want to learn TPRM from the inside by running the pipeline, not by reviewing it after the fact.

• You're comfortable coordinating with SMEs across seven different functions and holding them to a review deadline without formal authority over them.

• You'd rather fix the tracker or tighten the process than send another follow-up email chasing a DDQ response.

• You want a role where the scope is real and will grow as you prove you can carry it.

   

This is not for you if:

• You want a fully mature program and tooling handed to you with no gaps to close.

• You need someone else to define your daily priorities for you.

• You're uncomfortable owning a deadline for something you don't directly control, like a vendor's response time.

• You're looking for a purely strategic role with no operational coordination responsibility.

• Detail-heavy, document-intensive work across many concurrent relationships drains you rather than satisfies you.

 

Hard Requirements

• Several years of experience in third-party/vendor risk management, procurement risk, compliance, or a related operational/governance function.

• Comfortable managing due diligence and review cycles across multiple vendors, partners, and internal SME functions at once.

• Strong organizational and documentation skills — inventories, DDQs, and trackers stay accurate under you, not just after you build them.

• Working knowledge of, or strong ability to quickly learn, third-party risk concepts including due diligence tiering, BCDR/RTO/RPO, SLA monitoring, and issues management.

• Comfortable working with Excel/spreadsheets and reporting tools; experience with GRC or TPRM platforms is a plus but not required.

• In New York City, or ready to relocate.

 

Pay transparency

Compensation packages at Augustus include base salary, equity, and benefits. New hire offers are made based on a candidate's experience, expertise, and geographic location. The annual US base salary range for this role is $150,000-$250,000 + equity.

What We Offer

• Career Growth: You will be given more responsibility and pushed to grow faster than ever before.

• Network: Your peers are brilliant, highly motivated people. These people will be foundational in your future opportunities.

• Real Participation: Employees are shareholders. You will think and act like an owner.

• Perks & Benefits: Relocation support, visa support, the latest Apple gear (MacBook + AirPods), lunch benefit, gym benefit, a beautiful office in the heart of the city, 4x on-/offsites per year, and an annual development budget.

Additional to the global benefits above, we offer localized benefits such as comprehensive medical, dental, and vision insurance and a 401(k) retirement plan for our US team.

Augustus is committed to creating an inclusive environment where people from all backgrounds can thrive and where different viewpoints and experiences are valued and respected. Augustus will consider all applications for employment without regard to race, ethnicity, national origin, religious beliefs, gender identity or expression, sexual orientation, neurodiversity, disability, age, parental or veteran status.