ERM Program Manager

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an ERM Program Manager based in Canada.

We are seeking an experienced Enterprise Risk Management (ERM) professional to oversee the execution and continuous improvement of risk management operations within a fast-growing, regulated financial services environment. In this hands‑on role, you will coordinate risk assessments, maintain enterprise risk registers, and ensure that risk information is accurate, consistent, and actionable. You will collaborate with stakeholders across Legal, Compliance, Finance, Product, Security, and Operations to identify emerging risks and drive effective mitigation plans. You will also develop key risk indicators, validate risk assessments with functional owners, and prepare executive‑level and board‑ready reporting. Working within an established ERM framework, you will help strengthen risk visibility, accountability, and governance across multiple entities and jurisdictions. This remote opportunity is ideal for a detail‑oriented professional who combines strong risk management expertise with excellent communication skills and the ability to influence stakeholders without direct authority.

Accountabilities

• Enterprise Risk Management Execution: Manage the end‑to‑end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.

• Risk Register Management: Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.

• Risk Assessment and Scoring: Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.

• Risk Taxonomy and Classification: Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.

• Stakeholder Coordination: Organize regular check‑ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise‑level risk assessments.

• Mitigation Planning and Escalation: Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.

• Key Risk Indicators (KRIs): Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.

• Executive and Board Reporting: Prepare clear, accurate, and decision‑oriented ERM reports, executive summaries, risk dashboards, and board materials that communicate the organization’s risk exposure and mitigation progress.

• ERM Governance and Coordination: Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.

• Risk Intake Triage: Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow‑up actions in the appropriate systems.

• Process Documentation and Enablement: Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.

• Entity‑Level Risk Management: Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.

• Emerging Risk Monitoring: Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi‑jurisdictional operations for further assessment and review.

Requirements

• Professional Experience: Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker‑dealer, or capital markets environment.

• Hands‑On ERM Execution: Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.

• Risk Assessment Expertise: Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk ownership, and ongoing monitoring.

• GRC Platforms: Practical experience using GRC platforms to manage risk registers, workflows, controls, assessments, and reporting.

• Stakeholder Management: Proven ability to coordinate and influence cross‑functional stakeholders across Legal, Compliance, Finance, Product, Security, and Operations without relying on direct reporting authority.

• Regulatory Knowledge: Familiarity with SEC and FINRA requirements, or equivalent experience operating within a regulated financial services environment.

• Reporting and Communication: Excellent written communication skills, with the ability to develop clear risk statements, executive summaries, structured risk tables, and board‑ready materials.

• Risk Governance and Metrics: Experience tracking mitigation actions, monitoring operational risk indicators, defining KRIs, and escalating issues according to established governance processes.

• Analytical and Organizational Skills: Strong attention to detail, sound judgment, and the ability to consolidate complex information from multiple sources into actionable insights.

• Autonomy and Accountability: A proactive, hands‑on approach to program execution, with the ability to manage multiple priorities, maintain accurate documentation, and deliver reporting within established deadlines.

• Preferred Financial Services Experience: Exposure to broker‑dealer, clearing, or custody operations, particularly in environments with complex operational and regulatory requirements.

• Preferred Fintech Experience: Experience implementing or operating ERM programs within a high‑growth fintech or financial services organization.

• Preferred Digital Asset Risk Knowledge: Familiarity with cryptocurrency or digital asset risk management and associated operational considerations.

• Preferred Multi‑Entity Experience: Experience consolidating risk information across multiple legal entities, business units, or jurisdictions.

• Preferred Workflow and Framework Knowledge: Familiarity with Jira Service Management, structured risk intake workflows, COSO ERM, or ISO 31000, particularly from an operational implementation perspective.

• Preferred Board Reporting Experience: Previous experience preparing materials for board meetings, risk committees, or senior leadership governance forums.

• Location and Work Arrangement: Based in Canada, with the ability to work remotely within the applicable hiring and employment arrangements.

Benefits

• Competitive salary.

• Stock options, offering the opportunity to participate in the company's long‑term growth.

• Health benefits.

• One‑time home‑office setup allowance of USD $500 for new hires.

• Monthly stipend of USD $150 , provided through a Brex card, to support eligible work‑related expenses.

How Jobgether works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top‑fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre‑contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.