Overview

Flex is a growth-stage, NYC headquartered FinTech company that is creating the best rent payment experience. It’s 2025 and paying rent on time is expensive, inflexible, and difficult. Flex enables users to pay rent throughout the month on a schedule that better fits their finances and budget, empowering renters with flexibility over their most significant recurring expense. Flex is seeking motivated individuals to help grow this mission.

This role is a hybrid position with on-site expectations of 3 days per week in our New York or San Francisco headquarters. For candidates outside of the NY/NJ/SF area, relocation assistance may be available.

What You Will Do

Operational Risk Management

• Design and implement Flex’s enterprise ORM framework and operating structure.
• Lead the ORM working group and drive programmatic cadences such as risk assessments, remediation planning, and quarterly reviews.
• Manage core operational risk activities, including: process mapping, risk and control self-assessments (RCSAs), key risk indicators (KRIs), and incident and issue management.
• Deliver actionable reporting to senior leadership.
• Align ORM with regulatory frameworks and industry standards (e.g., OCC, FFIEC, NIST).
• Serve as the central coordination point for operational risk governance across business lines.

Third-Party Risk Management (TPRM)

• Own the full third-party risk lifecycle, from onboarding through termination, across a diverse vendor ecosystem (property management companies, property management software, payment providers, software platforms, BaaS partners, and contractors).
• Maintain and evolve the vendor inventory, tiering methodology, and due diligence standards.
• Partner cross-functionally with Legal, Security, Finance, CMS, and business stakeholders to ensure vendor engagements meet enterprise risk and regulatory standards.
• Conduct and review third-party assessments (e.g., SOC reports, control frameworks) and escalate risks when necessary.
• Manage residual risk ratings and design scalable ongoing monitoring practices.
• Report on vendor risks and mitigation strategies to senior leadership.

Who You Are

• 7–10+ years of experience in risk management, with expertise in both operational risk and third-party risk.
• Proven track record building and leading risk programs in regulated, high-growth, or technology-forward environments.
• Deep familiarity with regulatory frameworks (OCC, NIST, FFIEC, etc.) and best practices for ORM and TPRM.
• Experience working cross-functionally and driving accountability across Legal, Finance, Security, and business teams.
• Effective communicator, able to synthesize complex issues and influence at all levels of the organization.
• Background in consulting or enterprise risk transformation is a strong plus.

Why Join Us

• High visibility across senior leadership and governance forums.
• Ownership over ORM and TPRM with potential to scale into full ERM.
• Opportunity to modernize third-party oversight across a complex vendor landscape.
• Contribute to preparing Flex for public company readiness, investor confidence, and long-term resilience.

Compensation & Benefits

The compensation range will be commensurate with experience and internal leveling guidelines. For working locations in NY/NJ/CA, base salary ranges are $283,000 - $312,000. For all other states, base salary ranges are $255,000 - $281,000. We offer benefits for full-time, U.S.-based employees, including 100% company-paid medical, dental, and vision, 401(k) + company equity, unlimited PTO + 13 holidays, parental leave, Flex Cares Program, and more. For full-time non-U.S. employees, we offer competitive pay, company equity, and unlimited PTO.