ERM Program Manager

Skills

About the Role

You will run enterprise risk management operations from intake through reporting. You will maintain risk registers, coordinate risk owners and functional leads, validate residual risk scoring, track mitigation plans and KRIs, and produce leadership and board-ready materials.

Requirements

• 5 to 10 years of experience in operational risk, ERM, GRC, or compliance program management at a regulated financial institution.
• Experience running a risk register from intake through reporting.
• Ability to coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
• Hands-on GRC platform experience.
• Clear writing for risk statements, executive summaries, and board-ready tables.
• SEC/FINRA familiarity or equivalent regulated-environment experience.

Responsibilities

• Run the ERM intake cycle through ticket ingestion, interviews, surveys, and operational signals.
• Maintain functional and enterprise risk registers in Vanta.
• Coordinate functional risk lead check-ins and normalize inputs into the enterprise view.
• Map risks to L1 categories, L2 subcategories, and enterprise scenarios.
• Apply the ERM Risk Scoring Model and validate residual scores with risk owners.
• Track mitigation plans, owners, target dates, and escalations.
• Define KRIs with data owners and use proxy metrics where needed.
• Produce leadership and board ERM materials.
• Support ERM Working Group agendas, minutes, and action tracking.
• Operate the intake triage workflow by scoring, deduplicating, and registering actions.
• Build playbooks and templates for functional leads.
• Support local entity quarterly risk updates and escalation hygiene.
• Surface emerging crypto, AI, and multi-jurisdiction risks for review.

Benefits

• Stock options
• Health benefits
• One-time USD 500 new-hire home-office setup
• Monthly USD 150 stipend via a Brex Card