Risk and Compliance Manager

YPO; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

YPO is seeking a senior risk professional to build and operate its enterprise risk management program across global functions. This remote role partners with the Risk and Compliance Director to design the risk register, KRI framework, dashboards, and control library, while guiding policy and education for stakeholders.

You will work autonomously with substantial influence, ensuring risk ownership by business leaders and coordinating with Internal Audit.

Qualifications

• 5+ years in enterprise risk management, internal audit or compliance.
• Knowledge of COSO ERM and Internal Control framework.
• Experience building risk reporting or dashboards and moving to scalable tools.
• Strong policy drafting and written communication skills.

Responsibilities

• Lead design and maintenance of the enterprise risk register with ownership assignments.
• Develop a KRI framework and create scalable risk dashboards.
• Deliver risk education and awareness across the organization.
• Coordinate with Internal Audit to ensure complementary control testing.

Skills

Risk governance

Dashboards

Strategic thinking

Communication

Stakeholder management

COSO ERM

Education

Bachelor's degree in business / risk management

Tools

Salesforce

Microsoft Office

Job description

YPO is a global leadership community of over 35,000 chief executives from more than 140 countries. YPO brings together extraordinary leaders who are committed to becoming better leaders and better people. The organization provides a platform for the leaders to connect, learn, and grow through shared experiences, rich learning programs, and meaningful relationships. Members benefit from a supportive community that fosters personal, business, family and community growth.

Supporting these members is a world-class management team of more than 450 associates, spanning over 25 countries. Our organization is based in Dallas, Texas, with many associates working virtually and outside of the United States. Together, our team of global associates works to create a truly Only-in-YPO experience for our members.

This is a remote work-from-home position.

Work Hours

Candidates must be flexible to accommodate time zones of international stakeholders when necessary.

POSITION PURPOSE

This role sits within the Risk Management, Audit and Compliance function and partners with the Risk and Compliance Director to build, mature, and operate YPO's enterprise risk management (ERM) program and infrastructure, including the risk register, key risk indicator (KRI) framework, reporting and dashboards, and control library. Working enterprise-wide across YPO's global functions and regions, the role contributes to ERM strategy and program design, risk governance and committee structure, and risk education and awareness, and provides policy advisory support and clear communication to internal and external stakeholders. The role combines strategic framework-building with hands‑on execution, with significant autonomy over the infrastructure it builds and strong advisory influence with business and functional leaders, who retain ownership of remediation, while Internal Audit retains independent control testing. It reports to the Risk and Compliance Director and works alongside the Internal Assurance Manager and Tax Accounting Manager.

PRIMARY RESPONSIBILITIES

• Lead the design and ongoing maintenance of YPO's enterprise risk register in partnership with the Director, including risk identification, scoring methodology, and ownership assignment.
• Facilitate periodic risk workshops with business and functional leaders across the organization to keep the register current.
• Maintain a refresh cadence and ensure risks are actively owned by business leaders, not just recorded.
• Contribute to the design of risk governance and committee structures, and develop and deliver risk education and awareness across the organization.
• Develop and maintain a KRI framework tied to risks identified in the register, with defined thresholds and escalation paths.
• Build scalable risk reporting and dashboards that track KRI trends and risk exposure over time, moving the program away from manual spreadsheets.
• Evaluate available reporting tools and platforms, including existing YPO systems and dedicated risk and compliance tools, and recommend an effective, scalable reporting approach.
• Translate risk data into clear trends and insights that support decision-making by business and functional leaders, and develop internal risk communication tools.

Control Library

• Catalog and document existing controls across the organization, mapping each to the risks it mitigates.
• Evaluate whether existing controls are adequately designed to mitigate their mapped risks.
• Advise and make recommendations to business leaders on control redesign or modification where gaps exist. This role advises and recommends; business leaders own remediation decisions, documentation, and implementation.
• Coordinate with Internal Audit so that control design and documentation (owned by this role) and independent testing of operating effectiveness (owned by Internal Audit) remain complementary rather than duplicative.

Policy Advisory & Communication

• Provide guidance to stakeholders across the organization on compliance with internal policies and applicable external requirements.
• Draft, redline, and help maintain internal policy documents in partnership with policy owners.
• Translate risk and compliance findings into clear, actionable communication for department and business stakeholders.
• Working with the Director and the contracts and procurement team, review insurance limits and coverage types for vendors as part of the contracting and procurement workflow, checking against standard organizational requirements and escalating exceptions.
• Communicate insurance requirements to stakeholders and vendors.

SKILLS

• Proven ability to work independently with initiative, to be resourceful and self-motivated and proactively manage multiple tasks and projects simultaneously.
• Exceptionally strong administrative and organizational skills; commitment to detail, methodology and accuracy; effective time management and prioritization skills.
• Excellent communication skills with an emphasis on proactivity, clarity, thoroughness, and diligence.
• Proven characteristics of intellectual curiosity, responsibility, determination, creativity, flexibility, drive, and self-confidence.
• Ability to maintain discretion and integrity of confidential and sensitive information.
• Ability to connect the dots, integrate ideas, influence, partner, build consensus and foster strategic trusted advisor relationships with members and all levels of the organization.
• Ability to identify problems, research alternatives, provide solutions and/or resolve issues in a timely manner. Anticipates customer needs and delivers with clarity.
• Analytical with extremely high judgement, structured thinking and creative problem solving.
• Possesses a distinct global mindset, sensitive to local and international customs and protocols, with the ability to work effectively across functions and regions.
• Proficiency in Microsoft Office; Salesforce experience a plus. Hands-on experience building risk reporting and dashboards, with the ability to evaluate and recommend reporting tools. Keen desire to learn and apply new technologies and tools.
• Great sense of humor and works with integrity and humility.

EXPERIENCE/BACKGROUND

• 5+ years of experience in enterprise risk management, internal audit, or compliance, with direct experience building or operating risk registers, KRI frameworks, or control documentation.
• Working knowledge of COSO ERM and COSO Internal Control–Integrated Framework required.
• Demonstrated ability to evaluate control design (not just confirm existence) and communicate recommendations persuasively to business and functional leaders outside the risk function.
• Experience building risk reporting or dashboards and moving manual processes toward more scalable tools.
• Strong policy drafting and written communication skills.
• Comfortable operating as an individual contributor with significant autonomy, balancing operational and advisory work with longer-cycle framework-building.
• Not-for-profit, membership organization, or similarly matrixed environment experience a plus.
• Experience in a global, event-driven, or member-based organization a plus.

EDUCATION/TRAINING/CERTIFICATION

• Bachelor's degree in business, finance, risk management, or a related field required; advanced degree a plus, not required.
• One or more of the following certifications preferred: RIMS-CRMP (Certified Risk Management Professional), CRMA (Certification in Risk Management Assurance), CCEP (Certified Compliance and Ethics Professional).

PHYSICAL REQUIREMENTS

• Ability to work flexible and/or extended hours as needed to accommodate members and team members in multiple time zones.
• Ability to work for extended hours at a computer screen.
• Willingness and ability to travel, domestically and internationally, without restrictions, approximately 5% per year.

EOE

YPO is an Equal Opportunity Employer. YPO takes pride in supporting a diverse workforce and demonstrates this through its policies and practices. YPO does not discriminate in recruiting, hiring, training, promotion or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, marital or veteran status, disability or any other legally protected status.