Manager of Privacy Compliance

Upstart

7d•Remote

About The Position

Upstart is the leading AI lending marketplace partnering with banks and credit unions to expand access to affordable credit. By leveraging Upstart's AI marketplace, Upstart-powered banks and credit unions can have higher approval rates and lower loss rates across races, ages, and genders, while simultaneously delivering the exceptional digital-first lending experience their customers demand. More than 80% of borrowers are approved instantly, with zero documentation to upload. Upstart is a digital-first company, which means that most Upstarters live and work anywhere in the United States. However, we also have offices in San Mateo, California; Columbus, Ohio; Austin, Texas; and New York City, NY (opening Summer 2026). Most Upstarters join us because they connect with our mission of enabling access to effortless credit based on true risk. If you are energized by the impact you can make at Upstart, we’d love to hear from you! The Team: Upstart’s Privacy and Data Governance Risk team is responsible for building and operating a scalable, risk-based privacy program that supports our AI-powered lending platform. The team partners closely with Engineering, Product, Data Science, Data Analytics,Information Security, Legal, and Compliance to ensure responsible data use, regulatory alignment, and privacy-by-design across Upstart’s products and machine learning lifecycle. As the Manager of Privacy Compliance at Upstart, you will play a critical role in shaping and maturing the company’s privacy program. You will embed privacy controls into AI/ML systems, financial products, and data pipelines while enabling innovation and supporting compliance with complex financial and privacy regulations.

Requirements

Bachelor’s degree in law, business, information systems, computer science, or related discipline (or equivalent experience).
5+ years of privacy, compliance, risk, or data governance experience within fintech, financial services, AI/ML, or other highly regulated environments.
Strong working knowledge of:
Experience conducting DPRAs/PIAs/DPIAs, managing privacy controls, and partnering with technical teams.
Ability to translate regulatory requirements into actionable requirements for engineering and data science.

Nice To Haves

Professional privacy certifications such as CIPP/US, CIPM, or CIPT.
Experience supporting credit decisioning, lending, underwriting, fraud prevention, or financial operations.
Familiarity with model governance, automated decision systems, and AI/ML lifecycle processes.
Experience supporting regulatory examinations, internal audits, or external audits.
Knowledge of modern cloud architectures, data platforms, machine learning tooling, and generative AI

Responsibilities

Build, manage, and mature Upstart’s privacy program in alignment with consumer finance and privacy regulatory requirements.
Partner with Product, Engineering, Data Science, Data Analytics, Legal, Security, and Compliance to embed privacy-by-design into AI models, underwriting workflows, data pipelines, and new product features.
Lead privacy risk and impact assessments (DPRAs/PIAs/DPIAs) for new product launches, machine learning models, new data sources, consumer-facing financial products, and emerging technologies.
Support privacy aspects of model governance, explainability, algorithmic fairness reviews, and data lifecycle management.
Maintain enterprise privacy documentation, including records of processing activities, data flow diagrams, and system-of-record artifacts to support audits and regulatory expectations.
Collaborate with Security and Compliance on data safeguards, access controls, vendor assessments, and privacy incident response activities.

Benefits

Competitive Compensation (base + bonus & equity)
Comprehensive medical, dental, and vision coverage with Health Savings Account contributions from Upstart
Generous 401(k) plan with Upstart matching $2 for every $1 contributed, up to $15,000 per year
Employee Stock Purchase Plan (ESPP)
Life and disability insurance
Generous holiday, vacation, sick and safety leave
Supportive parental, family care, and military leave programs
Annual wellness, technology & ergonomic reimbursement programs
Social activities including team events and onsites, all-company updates, employee resource groups (ERGs), and other interest groups such as book clubs, fitness, investing, and volunteering
Catered lunches + snacks & drinks when working in offices