ERM Program Manager

Jobgether SRL; United States; À distance; USD 92 000 - 120 000; Plein temps

Avantages offerts par ce poste

Stock options

Health benefits

Home-office stipend (USD 500)

Brex card for expenses (USD 150/mo)

Résumé du poste

Jobgether SRL is seeking an experienced Enterprise Risk Manager to drive end-to-end ERM execution, maintain risk registers, and support executive reporting.

The role requires hands-on experience in risk assessment, GRC platforms, and cross-functional coordination across Legal, Compliance, Finance, Product, Security, and Operations. Remote-friendly with multi-entity exposure and regulatory familiarity.

Qualifications

• Experience in operational risk, ERM, GRC, or compliance within regulated financial services.
• Hands-on ERM execution from intake to mitigation tracking and executive reporting.
• Strong understanding of risk identification, inherent and residual risk, and monitoring.
• Experience using GRC platforms to manage risk registers, workflows, controls, and reporting.
• Proven ability to coordinate with Legal, Compliance, Finance, Product, Security, and Operations without direct authority.
• Familiarity with SEC and FINRA requirements or equivalent regulatory environments.
• Excellent written communication with ability to produce risk statements and board-ready materials.
• Experience tracking mitigation actions, defining KRIs, and following governance processes.
• Strong attention to detail and ability to consolidate information from multiple sources.
• Ability to work autonomously and manage multiple priorities.

Responsabilités

• Manage the end-to-end ERM intake process, collecting risk information through tickets, interviews, surveys, incident reports, and channels.
• Maintain risk registers in the GRC platform with risk owners, scores, mitigations, and status updates.
• Apply the ERM scoring model and validate residual risk ratings with risk owners.
• Map risks to Level 1/2 categories and enterprise scenarios for consistent reporting.
• Coordinate with functional risk leads to align functional and enterprise risk assessments.
• Track risk mitigation plans, owners, dates, and escalate overdue actions.
• Collaborate with data owners to define and monitor KRIs.
• Prepare ERM reports, executive summaries, dashboards, and board materials.
• Support ERM Working Group agendas, minutes, and action follow-ups.
• Triage risk intake workflow, identify duplicates, and record actions in systems.
• Develop playbooks, templates, and guidance for risk identification and reporting.
• Coordinate quarterly risk updates across entities and escalate significant issues.
• Identify emerging risks in crypto, AI, regulatory changes, and multi-jurisdictional operations.

Connaissances

ERM execution

Risk assessment

GRC platforms

Stakeholder management

Regulatory knowledge

Reporting and communication

KRIs and metrics

Analytical skills

Autonomy & accountability

Multi-entity coordination

Outils

Jira Service Management

COSO ERM

ISO 31000

Description du poste

Accountabilities

• Enterprise Risk Management Execution: Manage the end-to-end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.
• Risk Register Management: Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.
• Risk Assessment and Scoring: Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.
• Risk Taxonomy and Classification: Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.
• Stakeholder Coordination: Organize regular check-ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise-level risk assessments.
• Mitigation Planning and Escalation: Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.
• Key Risk Indicators (KRIs): Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.
• Executive and Board Reporting: Prepare clear, accurate, and decision-oriented ERM reports, executive summaries, risk dashboards, and board materials that communicate the organization's risk exposure and mitigation progress.
• ERM Governance and Coordination: Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.
• Risk Intake Triage: Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow-up actions in the appropriate systems.
• Process Documentation and Enablement: Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.
• Entity-Level Risk Management: Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.
• Emerging Risk Monitoring: Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi-jurisdictional operations for further assessment and review.

Requirements

• Professional Experience: Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker-dealer, or capital markets environment.
• Hands-On ERM Execution: Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.
• Risk Assessment Expertise: Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk ownership, and ongoing monitoring.
• GRC Platforms: Practical experience using GRC platforms to manage risk registers, workflows, controls, assessments, and reporting.
• Stakeholder Management: Proven ability to coordinate and influence cross-functional stakeholders across Legal, Compliance, Finance, Product, Security, and Operations without relying on direct reporting authority.
• Regulatory Knowledge: Familiarity with SEC and FINRA requirements, or equivalent experience operating within a regulated financial services environment.
• Reporting and Communication: Excellent written communication skills, with the ability to develop clear risk statements, executive summaries, structured risk tables, and board-ready materials.
• Risk Governance and Metrics: Experience tracking mitigation actions, monitoring operational risk indicators, defining KRIs, and escalating issues according to established governance processes.
• Analytical and Organizational Skills: Strong attention to detail, sound judgment, and the ability to consolidate complex information from multiple sources into actionable insights.
• Autonomy and Accountability: A proactive, hands-on approach to program execution, with the ability to manage multiple priorities, maintain accurate documentation, and deliver reporting within established deadlines.
• Preferred Financial Services Experience: Exposure to broker-dealer, clearing, or custody operations, particularly in environments with complex operational and regulatory requirements.
• Preferred Fintech Experience: Experience implementing or operating ERM programs within a high-growth fintech or financial services organization.
• Preferred Digital Asset Risk Knowledge: Familiarity with cryptocurrency or digital asset risk management and associated operational considerations.
• Preferred Multi-Entity Experience: Experience consolidating risk information across multiple legal entities, business units, or jurisdictions.
• Preferred Workflow and Framework Knowledge: Familiarity with Jira Service Management, structured risk intake workflows, COSO ERM, or ISO 31000, particularly from an operational implementation perspective.
• Preferred Board Reporting Experience: Previous experience preparing materials for board meetings, risk committees, or senior leadership governance forums.
• Location and Work Arrangement: Based in Canada, with the ability to work remotely within the applicable hiring and employment arrangements.

Benefits

• Competitive salary.
• Stock options, offering the opportunity to participate in the company's long-term growth.
• Health benefits.
• One-time home-office setup allowance of USD $500 for new hires.
• Monthly stipend of USD $150 , provided through a Brex card, to support eligible work-related expenses.