Enterprise Risk Management (ERM) Manager

University Corporation for Atmospheric Research; Boulder (CO); On-site; USD 113,000 - 142,000; Full time

Job summary

University Corporation for Atmospheric Research (UCAR) seeks an Enterprise Risk Management Manager to lead and mature our risk strategy across the organization. This cross-functional role drives risk assessment, incident response, business continuity, and compliance initiatives with key stakeholders in RAC and beyond.

The role emphasizes proactive risk culture, strategic planning, and collaboration with leadership to safeguard critical operations. US-person eligibility applies per policy.

Qualifications

• Master’s degree in business or related operational management.
• Five (5) years of comparable experience.
• General experience performing enterprise risk management responsibilities, such as risk assessment, mitigation planning, and risk reporting.
• Demonstrated experience leading incident response efforts, including coordinating cross-functional teams and subject matter experts.

Responsibilities

• Lead risk assessment and mitigation efforts across the organization.
• Coordinate incident response and recovery activities with RAC and leadership.
• Develop and maintain the business continuity program and related procedures.
• Define organizational risk appetite with leadership and promote a proactive risk culture.
• Provide executive summaries and technical briefings for leadership, legal counsel, and insurance partners.
• Manage ERM program budget, planning, and routine budget activities.

Skills

Enterprise risk management

Risk assessment

Incident response

Leadership

Education

Master’s degree in business or related operational management

Job description

Position Type

Regular

Visa Sponsored Job

No

Relocation Assistance Eligible

No

Hiring Range

113,470.00 USD - 141,840.00 USD *Final salary and rates are based on education, experience, and skills relevant to the role.

Application Closes

11:59 pm Mountain Time on 2026-11-12

About The Role

We are seeking a dynamic, forward-thinking Enterprise Risk Management (ERM) Manager to lead, reshape, and mature our organizational risk strategy.

This isn't just a corporate oversight role- it is an active, cross-functional leadership position.

This role will serve as the strategist and operational catalyst behind four essential pillars:

1. Risk assessment and mitigation
2. Incident response and recovery
3. Business continuity
4. Corporate compliance

To carry out these responsibilities, the ERM Manager will work closely with employees in the Risk, Assurance, and Compliance (RAC) team and across the organization.

US Person required: To qualify, the incumbent must be (a) a U.S. citizen; (b) lawfully admitted for permanent residence in the United States; or (c) a protected individual as defined by 8 USC1324b(a)(3).

Key Responsibilities

Risk Assessment and Mitigation

• Conduct periodic internal risk assessments, in coordination with the Director of RAC and Internal Audit, to identify, prioritize, and document key risks.
• Recommend risk mitigation and control measures to leadership and provide assistance as appropriate.
• Perform periodic external risk horizon scans, monitor emerging risks, and advise executive leadership as needed.
• Build, advance, and use tools, scorecards, and dashboards to accurately track and report risks for RAC and leadership awareness, enabling timely, well-informed decisions.
• Lead short- and long-term risk mitigation efforts, as assigned by the COO or Director of RAC, based on organizational needs.
• Act as internal advisor to departments, as requested, on risk mitigation and/or operational resilience.
• Facilitate cross-functional risk assessments between departments that consider interdependencies, internal and external factors, and both existing and emerging risks.
• Work with leadership to define organizational risk appetite, build a stronger risk culture, and shift the entire organization's mindset from reactive to proactive.

Incident Response and Recovery

• Oversee and coordinate incident response management during organizational critical events, working with subject matter experts and leadership on immediate, tactical responses and decision-making.
• Provide after-action assessments and incident response reviews for continuous improvement.
• Partner with UCAR Communications to ensure accurate, timely, and strategic messaging throughout all stages of incident response and recovery.
• Enhance capabilities and maintain readiness with UCAR response plans and incident response resources.
• Oversee UCAR's incident response program through planning, training, and exercises.
• Integrate incident response team plans with LCPO tactical response plans (e.g., cyber response, aviation incidents).
• Develop executive summaries and technical briefings for leadership, legal counsel, and insurance partners to understand and document the incident after the fact.

Business Continuity

• Manage business continuity activities to develop a coherent, integrated business continuity program across the organization.
• Champion and foster senior leadership support for business continuity.
• Develop and maintain the framework, processes, and procedures departments follow when establishing business continuity plans for their operations.
• Coach department representatives through completing business impact analyses, risk assessments, gap analyses, recovery strategy development, and business continuity plan writing.
• Develop and manage a program that ensures business continuity plans are regularly exercised, reviewed, updated, and adequately integrated.

Corporate Compliance

• Partner with the Director of RAC and work with stakeholders organization-wide to: Establish and monitor key compliance requirements and their status across the organization.
• Research compliance requirements for new organizational initiatives.
• Periodically report on organizational compliance status to leadership.

Administrative Activities

• Complete all required professional development, including goal-setting, training, and participation in periodic performance reviews.
• Manage the enterprise risk management budget, spending, and requests for incremental increases, including participation in routine budget planning and reconciliation activities.

Education & Experience REQUIRED

• Master's degree in business or related operational management or
• Five (5) years of comparable experience
• General experience performing enterprise risk management responsibilities, such as risk assessment, mitigation planning, and risk reporting.
• Demonstrated experience leading incident response efforts, including coordinating cross-functional teams and subject matter experts during crit