Flex is a growth-stage, NYC headquartered FinTech company that is creating the best rent payment experience. It’s hard to believe that it’s 2026 and paying rent on time is expensive, inflexible, and difficult. We’re here to change that! Flex enables our users to pay rent throughout the month on a schedule that better fits their finances and budget. Our mission is to empower as many renters as possible with flexibility over their most significant recurring expense. After deliberately keeping a stealth profile as we built up unprecedented investor support and an enthusiastic user base, we are looking for motivated individuals to help us keep our mission growing. Will you be a part of the team?
About Flex
Flex is a venture-backed fintech company helping businesses manage and optimize their spend with modern financial products and software. We partner with some of the most innovative companies in the world and operate in a highly regulated, fast-growing environment. As we continue to scale, building best‑in‑class risk and compliance programs is critical to enabling our growth.
The Role
We are looking for an Associate Director, Third-Party Risk Management (TPRM) to own the TPRM pillar at Flex. This is not a program management role. It is a pillar ownership role: you set the risk posture, define the operating model, and are accountable for outcomes across a vendor population that touches every part of the business.
You will lead a small team, establish the direction for how Flex evaluates and monitors third-party risk, and make the calls on where speed and rigor need to be balanced. You will design AI-enabled workflows that scale the team's capacity without sacrificing auditability or regulatory defensibility. And you will hold Flex's third-party risk position across the organization, shaping decisions in Product, Engineering, Finance, and Procurement rather than responding to requests from them.
This role is right for someone who has owned TPRM at a mature, regulated institution and also built something from the ground up at a high-growth fintech. Someone comfortable with ambiguity, confident in their risk judgment, and ready to be handed the reins.
What You’ll Do
- Own Flex's third-party risk posture end-to-end: set the strategy, define the operating model, and be accountable for outcomes across the full vendor population
- Establish and maintain the policies, standards, and governance framework that underpin TPRM across the organization
- Make risk-based decisions on vendor approvals, exceptions, and escalations, including explicit tradeoffs between speed and risk exposure, and defend those positions to senior leadership and regulators
- Architect scalable intake, tiering, due diligence, and monitoring workflows, designing AI-enabled automation where it improves speed and consistency without removing human judgment from consequential decisions
- Build signal-driven monitoring systems that surface vendor risk in real time (financial distress, security incidents, operational failures) rather than relying on calendar-based review cycles
- Design and own AI workflows for high-volume tasks like SOC report analysis, questionnaire scoring, and exception tracking, with clear auditability and human-in-the-loop checkpoints throughout
- Drive risk alignment across Product, Engineering, Finance, and Procurement, shaping vendor strategy and sourcing decisions upstream rather than reviewing them after the fact
- Serve as Flex's authoritative voice on third-party risk in regulatory exams, audits, and customer due diligence requests
- Own the reporting framework that gives senior leadership real-time, decision-relevant visibility into third-party risk posture
- Proactively identify emerging third-party risks across new vendor categories, evolving threat landscapes, and regulatory developments, and evolve controls before they become issues
- Help mentor and develop more junior team members as the program and team scale
What We’re Looking For
- 7+ years of experience in third-party risk, vendor risk, or a closely related risk and compliance discipline
- Experience at both a large, regulated institution with a mature risk function and a high-growth, venture-backed fintech or technology company
- Demonstrated track record of making and defending risk-based decisions under ambiguity, including explicit speed-vs-risk tradeoffs
- Experience designing AI-enabled workflows for risk or compliance use cases, with a clear point of view on where automation helps and where human oversight is non-negotiable
- Strong working knowledge of vendor risk domains: security, privacy, operational, financial, and regulatory
- Proven ability to influence across Product, Engineering, and Finance, not just within a compliance or risk silo
- Strong communication skills; able to translate complex risk positions into clear recommendations for executive and board-level audiences
- Comfort with data; SQL experience or the ability to query and analyze data independently is a strong plus
- Experience supporting or leading regulatory exams in a financial services or fintech environment
Nice to Have
- Experience building a TPRM program from scratch at a high-growth company
- Familiarity with GRC platforms and common TPRM tooling
- Working knowledge of relevant frameworks and standards (SOC 2, ISO 27001, NIST, PCI, etc.)
- Prior people management or team lead experience
Flex takes a market-based approach to pay, ensuring compensation is commensurate with a candidate's experience and our internal leveling guidelines. For candidates located in our Tier 1 (NYC/Bay Area) and Tier 3 (Salt Lake City) markets, the base salary pay range for this role is below. Flex utilizes a geographic pay differential based on a cost of labor index. If you are located outside of the cities listed below, your starting pay will be adjusted to align with the market conditions of your specific geographic zone. Please speak with your recruiter for additional information regarding the specific range for your location.
We understand that it takes a diverse team of highly intelligent, curious, determined, empathetic, and self aware people to grow a successful company. Our HQ is located in New York City, but we have employees located throughout the US, Australia, Canada and South America. We are growing quickly, but deliberately, with a focus on building an inclusive culture. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity workplace.
Offices
Roles posted in New York, San Francisco, and Salt Lake City are hybrid positions with on-site expectations of 2-3 days per week in our local offices. For candidates outside of these areas, you may be eligible for our relocation assistance program.
Benefits
For full-time U.S. employees we offer:
- Competitive medical, dental, and vision
- Company equity
- 401(k) plan with company match
- Unlimited paid time off + 13 company paid holidays
- Parental leave
- Free Flex subscription
For full-time non-U.S. employees, we offer:
- Competitive compensation + company equity
- Unlimited PTO
Skills Required
- 7+ years of experience in third-party risk or vendor risk
- Experience at a large, regulated institution and a high-growth fintech
- Experience designing AI-enabled workflows
- Strong working knowledge of vendor risk domains
- Experience supporting or leading regulatory exams
Flex Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Flex and has not been reviewed or approved by Flex.
-
Healthcare Strength — Day-1 medical, dental, and vision coverage is explicitly offered and framed as “best-in-class coverage and options,” suggesting strong baseline health benefits. Additional listings also describe broad health-support elements such as IVF/adoption and gender transition benefits, reinforcing depth in healthcare-related coverage.
-
Retirement Support — A 401(k) is available, with a stated company match starting in early 2026, indicating improving retirement support. This rollout appears to address earlier gaps where matching was not consistently present.
-
Leave & Time Off Breadth — Unlimited PTO plus company holidays (and, in some descriptions, shutdown days) indicates a wide time-off policy on paper. Hybrid work flexibility and office-day meal credits can add to the overall rewards value for NYC-based employees.
Flex Insights
What We Do
Flex, an NYC-headquartered FinTech company, has created a trusted rent payment experience. It’s hard to believe that it’s 2024 and paying rent on time is expensive, inflexible, and difficult; we’re here to change that! We enable our users to pay rent throughout the month on a schedule that better fits their finances and budget, while also helping them build credit. Our mission is to empower as many renters as possible with flexibility over their most significant recurring expense.
Why Work With Us
We believe it takes a diverse team of curious, determined, empathetic, and self aware people to grow a successful company. We value the unique and dynamic perspectives our team brings to solve critical problems that impact the lives of our users and the financial decisions they make.
Gallery
