Third Party Risk Manager

Few people get to build a bank from scratch. Even fewer get to build one at a moment when banking itself is being reinvented.

The dollar is the best product in the history of the world, with practically infinite global demand, but distribution is broken. Global clearing runs on legacy banks that are closed 115 days a year, built for humans and take two days to settle. Augustus is the update to the internet era. We received conditional approval from the OCC to charter America’s first stablecoin-native clearing bank that is always open, made for machines, at the speed of compute.

We are a group of operators, unicorn early employees, ex-founders and people who walked away from degrees because they believe this is an industry and career defining opportunity. We're backed with $40M from Peter Thiel’s Valar Ventures, Creandum and founders of Ramp, Deel and Circle.

We are regulated in Europe and live with Euro and Stablecoin clearing today. Now, we are building the US team from the ground up, while continuing to grow rapidly in Europe.

No TPRM function existed before you. You get to build it right from the start. There is no safety net. What you build is what the company runs on.

You will own Third-Party Risk Management end to end at Augustus, covering both third-party service providers and strategic partnerships. You are responsible for building a real, operating TPRM program: intake, risk tiering, due diligence, ongoing monitoring, issues management, escalation, reporting, and governance.

You design and run the complete lifecycle for both service providers and partnerships: how new relationships are evaluated before engagement, how critical and high-risk ones are monitored over time, and how control gaps, incidents, concentration risk, and dependency risk are surfaced and resolved. Where process exists, you pressure-test it. Where it doesn't, you build it.

The end state is a program that leadership trusts and regulators take seriously: a comprehensive inventory with clear ownership and risk tiering, consistent risk-based due diligence, clean reporting and escalation paths, and defensible decisions around onboarding, ongoing reliance, remediation, and exit.

• Months 1-2: Get the full picture. You learn how third-party relationships actually work today. You map all existing vendors and partners, assess where risk has been managed informally or not at all, and identify gaps. By the end of month 2, you've defined the end-state operating model.

• Months 3-4: Build the foundation. You stand up the core program: intake standards, risk tiering, due diligence requirements, and ongoing monitoring for critical and high-risk relationships. Issues and control gaps have a clear home - tracked, escalated, and resolved with ownership. The business knows how to engage vendors and partners without guesswork.

• Months 5-6:
  The program is live. New relationships flow through a predictable process. Issues are surfaced early with clear ownership and risk discussions move from "are we exposed?" to "what's the right decision here?" The program scales, withstands regulatory scrutiny, and adapts as the company grows.

We believe that throwing smart people with high agency at big problems produces the best outcomes. The people who succeed here share the following traits:

• Relentless: You can't leave something broken. You don't stop because it got hard or because no one is watching.

• Set The Bar: You're harder on yourself than anyone else would be. You don't need external accountability to care about quality.

• Shape The Game: You don't wait for a playbook and you don't need one. You walk into genuinely new territory and figure it out. You move before anyone asked you to.

• Systems First: You don't solve problems by adding people or effort. You build systems that make the problem smaller. Your first instinct is to automate, not to handle it manually.

This role is for you if:

• You'd rather be in the room when a vendor decision is being made than reviewing it after the fact.

• You want direct ownership of the full lifecycle (intake, diligence, monitoring, escalation, exit) rather than a narrow…