ERM Program Manager — Board-Ready Risk & GRC

Alpaca; New York (NY); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Salary & stock options

Home office stipend

Monthly stipend

Job summary

Alpaca, a US-headquartered fintech, is seeking a hands-on ERM Program Manager to own end-to-end ERM execution: intake, risk register hygiene, residual scoring with risk owners, and board-ready reporting. You’ll report to the CISO / ERM Lead and collaborate with the ERM Working Group and local leaders.

This mid-career role (5–10 years) focuses on coordinating Legal, Compliance, Finance, Product, Security, and Operations, maintaining risk registers (Vanta), mapping risks to enterprise categories,

Qualifications

• Hands-on ERM/GRC program management experience.
• Clear writing: risk statements, executive summaries, board-ready reports.
• Experience coordinating Legal, Compliance, Finance, Product, Security, and Operations stakeholders.

Responsibilities

• Run the ERM intake cycle end to end: ticket ingestion, functional interviews, surveys, and ad hoc signals.
• Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.
• Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.
• Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise reporting.
• Track mitigation plans, action owners, target dates, and escalations.
• Define KRIs with data owners; use proxy metrics where instrumentation is maturing.
• Produce leadership and board ERM materials.
• Support ERM Working Group agendas, minutes, and action tracking.
• Operate the intake triage workflow: score, dedupe, register action.
• Build playbooks and templates for functional leads.
• Support local entity quarterly risk updates and escalation hygiene.
• Surface emerging risks (crypto, AI, multi-jurisdiction) for review.

Skills

ERM

GRC

Stakeholder coordination

Board reporting

Risk management

Tools

Vanta

Jira

Job description

Alpaca, a US-headquartered fintech, is seeking a hands-on ERM Program Manager to own end-to-end ERM execution: intake, risk register hygiene, residual scoring with risk owners, and board-ready reporting. You’ll report to the CISO / ERM Lead and collaborate with the ERM Working Group and local leaders.

This mid-career role (5–10 years) focuses on coordinating Legal, Compliance, Finance, Product, Security, and Operations, maintaining risk registers (Vanta), mapping risks to enterprise categories,