Apply on Employer Site

Flex · 1 day ago

Senior Director, Compliance Governance & Operations

San Francisco, California, United States

Full-time

Hybrid

Mid, Senior Level

$283K/yr - $312K/yr

7+ years exp

Flex is a growth-stage FinTech company headquartered in NYC, focused on creating the best rent payment experience. They are seeking a Senior Director of Operational Risk Management & Third-Party Risk to lead the development of their ORM framework and oversee the TPRM program, ensuring operational and external risk exposures are managed effectively.

AppsBillingFinancial ServicesFinTechSoftware

Responsibilities

Design and implement Flex’s enterprise ORM framework and operating structure

Lead the ORM working group and drive programmatic cadences such as risk assessments, remediation planning, and quarterly reviews

Manage core operational risk activities, including:

Process Mapping

Risk and Control Self-Assessments (RCSAs)

Key Risk Indicators (KRIs)

Incident and issue management

Deliver actionable reporting to senior leadership

Align ORM with regulatory frameworks and industry standards (e.g., OCC, FFIEC, NIST)

Serve as the central coordination point for operational risk governance across business lines

Own the full third-party risk lifecycle, from onboarding through termination, across a diverse vendor ecosystem that includes property management companies, property management software, payment providers, software platforms, BaaS partners, and contractors

Maintain and evolve the vendor inventory, tiering methodology, and due diligence standards

Partner cross-functionally with Legal, Security, Finance, CMS, and business stakeholders to ensure vendor engagements meet enterprise risk and regulatory standards

Conduct and review third-party assessments (e.g., SOC reports, control frameworks) and escalate risks when necessary

Manage residual risk ratings and design scalable ongoing monitoring practices

Report on vendor risks and mitigation strategies to senior leadership

Qualification

Operational Risk ManagementThird-Party Risk ManagementRegulatory FrameworksRisk AssessmentsCross-Functional CollaborationConsulting BackgroundEffective Communication