ERM Program Manager

Accountabilities

• Enterprise Risk Management Execution:Manage the end-to-end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.

• Risk Register Management:Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.

• Risk Assessment and Scoring:Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.

• Risk Taxonomy and Classification:Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.

• Stakeholder Coordination:Organize regular check-ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise-level risk assessments.

• Mitigation Planning and Escalation:Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.

• Key Risk Indicators (KRIs):Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.

• Executive and Board Reporting:Prepare clear, accurate, and decision-oriented ERM reports, executive summaries, risk dashboards, and board materials that communicate the organization's risk exposure and mitigation progress.

• ERM Governance and Coordination:Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.

• Risk Intake Triage:Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow-up actions in the appropriate systems.

• Process Documentation and Enablement:Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.

• Entity-Level Risk Management:Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.

• Emerging Risk Monitoring:Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi-jurisdictional operations for further assessment and review.

Requirements:

• Professional Experience:Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker-dealer, or capital markets environment.

• Hands-On ERM Execution:Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.

• Risk Assessment Expertise:Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk ownership, and ongoing monitoring.

• GRC Platforms:Practical experience using GRC platforms to manage risk registers, workflows, controls, assessments, and reporting.

• Stakeholder Management:Proven ability to coordinate and influence cross-functional stakeholders across Legal, Compliance, Finance, Product, Security, and Operations without relying on direct reporting authority.

• Regulatory Knowledge:Familiarity with SEC and FINRA requirements, or equivalent experience operating within a regulated financial services environment.

• Reporting and Communication:Excellent written communication skills, with the ability to develop clear risk statements, executive summaries, structured risk tables, and board-ready materials.

• Risk Governance and Metrics:Experience tracking mitigation actions, monitoring operational risk indicators, defining KRIs, and escalating issues according to established governance processes.

• Analytical and Organizational Skills:Strong attention to detail, sound judgment, and the ability to consolidate complex information from multiple sources into actionable insights.

• Autonomy and Accountability:A proactive, hands-on approach to program execution, with the ability to manage multiple priorities, maintain accurate documentation, and deliver reporting within established deadlines.

• Preferred Financial Services Experience:Exposure to broker-dealer, clearing, or custody operations, particularly in environments with complex operational and regulatory requirements.

• Preferred Fintech Experience:Experience implementing or operating ERM programs within a high-growth fintech or financial services organization.

• Preferred Digital Asset Risk Knowledge:Familiarity with cryptocurrency or digital asset risk management and associated operational considerations.

• Preferred Multi-Entity Experience:Experience consolidating risk information across multiple legal entities, business units, or jurisdictions.

• Preferred Workflow and Framework Knowledge:Familiarity with Jira Service Management, structured risk intake workflows, COSO ERM, or ISO 31000, particularly from an operational implementation perspective.

• Preferred Board Reporting Experience:Previous experience preparing materials for board meetings, risk committees, or senior leadership governance forums.

• Location and Work Arrangement:Based in Canada, with the ability to work remotely within the applicable hiring and employment arrangements.

Benefits:

• Competitive salary.

• Stock options, offering the opportunity to participate in the company's long-term growth.

• Health benefits.

• One-time home-office setup allowance ofUSD $500for new hires.

• Monthly stipend ofUSD $150, provided through a Brex card, to support eligible work-related expenses.