If you’ve been looking to join a fast-growing startup with a bold vision of a world where doing good is built into everything we do, then you’ve found the right place.

Backed by General Catalyst, the same investors behind Stripe and Airbnb, we’re building something truly extraordinary.

Our Mission

Our mission at Goodstack is to revolutionize how the world does good 🌎.

As a fast growth, AI-native social impact startup, we power global change through technology. We enable companies to seamlessly integrate positive impact into what they do through a unified platform while supporting nonprofits in gaining access to cutting-edge technology and finding new funding streams.

Global brands, including Google, OpenAI, TikTok, LinkedIn, HSBC, Atlassian and Twilio - as well as thousands of nonprofits, including the Red Cross, Cancer Research, and Oxfam - use Goodstack to make a difference.

In 2025 alone, we facilitated $5 billion in donations to good causes. But this is just the beginning. We're building the world’s leading platform that powers donations to nonprofits globally.

To keep our momentum and deliver consistently high value to our partners, we need incredible people to help us on our journey – we need you 🫵

Join us as Fraud Risk Manager to help protect the funding of thousands of Nonprofits!

We're looking for an experienced fraud manager to own how we detect, measure, and respond to fraud. You'll set the direction and the operating model, then keep evolving both as our risk changes. You'll work closely with Operations, Product, and Engineering, and over time you'll shape how the fraud function grows.

As Fraud Risk Manager, your mission will be to

Own the fraud threat model and set risk appetite, detection thresholds, and the balance between fraud caught and genuine users turned away.

Make the key policy calls, including where to set the burden of proof for eligibility.

Own the measurement framework: the metrics that matter, how detection accuracy is measured, and the guardrails that keep it honest.

Set the direction for machine learning, what it predicts and how it's measured, with build sitting in engineering.

Lead, develop, and set the quality bar for the fraud specialists, including workflows, escalation, and SLAs.

Own how the fraud function performs across partners, and own the roadmap and build versus buy calls on tooling and vendors.

After 6 months, success will look like

A clear view of our fraud typologies and how they are evolving, grounded in our own data.

Defined risk appetite, detection thresholds, and the trade-off between fraud caught and legitimate users turned away.

A recommendation on whether and where machine learning fits, with a design for it: what it predicts, the signals it draws on, and how it is measured. Build sits with engineering.

The metrics that matter, how we measure detection accuracy, and the guardrails that keep them honest.

Clear recommendations on the questions we are wrestling with, including where to set the burden of proof for eligibility.

This role is a perfect match for you if you have

5-7 years in a fraud or risk role, ideally in payments, fintech, marketplaces, or identity verification.

Deep knowledge of fraud typologies and how fraud rings form, adapt, and shift tactics over time.

A track record of setting risk appetite, detection thresholds, and review policies in a live environment, and keeping them current.

Strong judgement on the balance between catching fraud and protecting the experience of genuine users.

Enough technical fluency to work closely with engineers and know what's realistic to build.

Comfort working from data: able to interrogate detection metrics, false positives and negatives, and draw defensible conclusions.

Bonus if you have knowledge or love of

Experience in education, nonprofit, or grant verification, or another domain with institutional eligibility checks.

Familiarity with domain and email-based fraud signals, such as institution impersonation and disposable or pseudo-official domains.

Hands-on exposure to fraud tooling and vendors, such as identity verification, device fingerprinting, or domain reputation services.