ERM Program Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the complete ERM intake process, which includes ticket ingestion, conducting functional interviews, surveys, and addressing ad hoc signals from incidents or operational channels.

• Maintain both functional and enterprise risk registers within Vanta, ensuring the inclusion of owners, inherent and residual scores, mitigations, and current status.

• Organize check-ins for functional risk leads, address blockers, and standardize inputs into the enterprise perspective.

• Align risks with Alpaca's 15 Level 1 categories and Appendix C Level 2 subcategories for enterprise scenario reporting.

• Utilize the ERM Risk Scoring Model and confirm residual risk with the respective risk owners.

• Monitor mitigation strategies, action owners, target deadlines, and escalation processes.

• Collaborate with data owners to define Key Risk Indicators (KRIs) and employ proxy metrics when instrumentation is still developing.

• Create ERM materials for leadership and board presentations.

• Assist in managing ERM Working Group agendas, recording minutes, and tracking actions.

• Execute the intake triage workflow: evaluate, deduplicate, and register actions.

• Develop playbooks and templates for functional leads.

• Facilitate quarterly risk updates for local entities and ensure proper escalation hygiene.

• Identify emerging risks, such as those related to crypto, AI, and multi-jurisdictional issues, for evaluation.

• Update risk registers, conduct functional risk lead check-ins, and prepare board materials.

• Report directly to the CISO/ERM Lead and collaborate with the ERM Working Group, functional risk leads, and leaders of local entities.

⛳️ Requirements

• Mid-career experience (approximately 5 to 10 years) in operational risk, ERM, GRC, or compliance program management within a regulated financial institution (such as broker-dealer, fintech, or capital markets).

• Experience in building or managing a risk register from intake to reporting; not limited to framework design.

• Capability to coordinate with stakeholders in Legal, Compliance, Finance, Product, Security, and Operations without direct authority.

• Practical experience with GRC platforms.

• Proficient in clear writing, including risk statements, executive summaries, and board-ready tables.

• Familiarity with SEC/FINRA regulations or experience in a similar regulated environment.

• Background in broker-dealer, clearing, or custody operations.

• Experience in high-growth fintech environments, establishing ERM as the business expanded.

• Exposure to crypto and digital assets risk registers.

• Experience with multi-entity and multi-jurisdiction risk consolidation.

• Knowledge of Jira service desk or structured intake workflow design.

• Practical implementation experience with COSO ERM / ISO 31000 as an operator.

• Previous experience drafting reports for the board or risk committee.

🏝️ Benefits

• Competitive Salary & Stock Options

• Health Benefits

• New Hire Home-Office Setup: One-time USD $500

• Monthly Stipend: USD $150 per month via a Brex Card