ERM Program Manager

jobgether; New York (NY); Remote; USD 78,000 - 106,000; Full time

Benefits offered by this job

Stock options

Health benefits

Home-office setup allowance USD 500

Monthly stipend USD 150 via Brex card

Job summary

jobgether is seeking an experienced ERM Program Manager based in Canada, with robust risk management expertise to lead enterprise risk efforts across multiple entities. You will coordinate risk assessments, maintain risk registers, develop KRIs, and produce board-ready reporting within an established ERM framework.

The role emphasizes collaboration with Legal, Compliance, Finance, Product, Security, and Operations, while driving mitigation plans and governance improvements.

Qualifications

• 5–10 years of operational risk/ERM experience in a regulated financial environment.
• Hands-on risk management from intake to executive reporting.
• Knowledge of risk scoring, risk ownership, and KRIs.
• Experience with GRC platforms and risk governance.

Responsibilities

• Manage end-to-end ERM intake, risk identification, and escalation.
• Maintain and update enterprise risk registers in the GRC system.
• Apply ERM scoring models and validate residual risks with owners.
• Prepare executive and board-level ERM reporting and dashboards.
• Coordinate with Legal, Compliance, Finance, Product, Security, and Ops.

Skills

Operational risk

ERM

GRC

Stakeholder management

Regulatory knowledge

Risk reporting

Analytical skills

Governance

Project management

Communication

Tools

GRC platforms

Jira Service Management

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an ERM Program Manager based in United States.

We are seeking an experienced Enterprise Risk Management (ERM) professional to oversee the execution and continuous improvement of risk management operations within a fast-growing, regulated financial services environment. In this hands‑on role, you will coordinate risk assessments, maintain enterprise risk registers, and ensure that risk information is accurate, consistent, and actionable. You will collaborate with stakeholders across Legal, Compliance, Finance, Product, Security, and Operations to identify emerging risks and drive effective mitigation plans.

You will also develop key risk indicators, validate risk assessments with functional owners, and prepare executive‑level and board‑ready reporting. Working within an established ERM framework, you will help strengthen risk visibility, accountability, and governance across multiple entities and jurisdictions. This remote opportunity is ideal for a detail‑oriented professional who combines strong risk management expertise with excellent communication skills and the ability to influence stakeholders without direct authority.

Accountabilities

• Enterprise Risk Management Execution: Manage the end-to-end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.
• Risk Register Management: Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.
• Risk Assessment and Scoring: Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.
• Risk Taxonomy and Classification: Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.
• Stakeholder Coordination: Organize regular check‑ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise‑level risk assessments.
• Mitigation Planning and Escalation: Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.
• Key Risk Indicators (KRIs): Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.
• Executive and Board Reporting: Prepare clear, accurate, and decision‑oriented ERM reports, executive summaries, risk dashboards, and board materials that communicate the organization's risk exposure and mitigation progress.
• ERM Governance and Coordination: Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.
• Risk Intake Triage: Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow‑up actions in the appropriate systems.
• Process Documentation and Enablement: Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.
• Entity‑Level Risk Management: Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.
• Emerging Risk Monitoring: Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi‑jurisdictional operations for further assessment and review.

Requirements

• Professional Experience: Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker‑dealer, or capital markets environment.
• Hands‑On ERM Execution: Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.
• Risk Assessment Expertise: Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk ownership, and ongoing monitoring.
• GRC Platforms: Practical experience using GRC platforms to manage risk registers, workflows, controls, assessments, and reporting.
• Stakeholder Management: Proven ability to coordinate and influence cross‑functional stakeholders across Legal, Compliance, Finance, Product, Security, and Operations without relying on direct reporting authority.
• Regulatory Knowledge: Familiarity with SEC and FINRA requirements, or equivalent experience operating within a regulated financial services environment.
• Reporting and Communication: Excellent written communication skills, with the ability to develop clear risk statements, executive summaries, structured risk tables, and board‑ready materials.
• Risk Governance and Metrics: Experience tracking mitigation actions, monitoring operational risk indicators, defining KRIs, and escalating issues according to established governance processes.
• Analytical and Organizational Skills: Strong attention to detail, sound judgment, and the ability to consolidate complex information from multiple sources into actionable insights.
• Autonomy and Accountability: A proactive, hands‑on approach to program execution, with the ability to manage multiple priorities, maintain accurate documentation, and deliver reporting within established deadlines.
• Preferred Financial Services Experience: Exposure to broker‑dealer, clearing, or custody operations, particularly in environments with complex operational and regulatory requirements.
• Preferred Fintech Experience: Experience implementing or operating ERM programs within a high‑growth fintech or financial services organization.
• Preferred Digital Asset Risk Knowledge: Familiarity with cryptocurrency or digital asset risk management and associated operational considerations.
• Preferred Multi‑Entity Experience: Experience consolidating risk information across multiple legal entities, business units, or jurisdictions.
• Preferred Workflow and Framework Knowledge: Familiarity with Jira Service Management, structured risk intake workflows, COSO ERM, or ISO 31000, particularly from an operational implementation perspective.
• Preferred Board Reporting Experience: Previous experience preparing materials for board meetings, risk committees, or senior leadership governance forums.

Location and Work Arrangement

Based in Canada, with the ability to work remotely within the applicable hiring and employment arrangements.

Benefits

• Competitive salary.
• Stock options, offering the opportunity to participate in the company's long‑term growth.
• Health benefits.
• One‑time home‑office setup allowance of USD $500 for new hires.
• Monthly stipend of USD $150, provided through a Brex card, to support eligible work‑related expenses.

We appreciate your interest and wish you the best!