ERM Program Manager

About the role

As an ERM Program Manager at Alpaca, you will manage operational risk through hands-on updates to risk registers and the coordination of risk assessments. This role involves producing materials for leadership and board meetings, ensuring that risks are effectively tracked and communicated.

You will work within a global team dedicated to transforming financial services through innovative technology. Success in this role requires strong collaboration skills and the ability to navigate complex regulatory environments, particularly in the context of emerging risks in crypto and AI.

The salary range for this role is between $112,000 and $188,000, reflecting competitive compensation for the responsibilities involved.

Skills that matter here

• ISO 31000: This role applies ISO 31000 standards to operational risk management processes.
• Compliance Program Management: You will manage compliance aspects of risk assessments and reporting.
• ERM: The position focuses on implementing Enterprise Risk Management practices.
• Risk Register: You will maintain and update risk registers, ensuring accurate tracking of risks.
• Operations: Operational efficiency is key as you coordinate risk management activities.
• Capital Markets: Experience in capital markets is essential due to the financial nature of the role.

Who this role suits

• Has 5 to 10 years of experience in operational risk or compliance within regulated industries.
• Possesses strong communication skills for clear reporting and stakeholder coordination.
• Is hands-on and detail-oriented, capable of managing risk registers and producing board materials.
• Thrives in a collaborative environment, working effectively with cross-functional teams.

From the employer

Your Role

This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports.

Things You Get To Do

• Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.
• Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.
• Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.
• Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.
• Apply the ERM Risk Scoring Model and push residual validation with risk owners.
• Track mitigation plans, action owners, target dates, and escalations.
• Define KRIs with data owners; use proxy metrics where instrumentation is still maturing.
• Produce leadership and board ERM materials.
• Support ERM Working Group agendas, minutes, and action tracking.
• Operate the intake triage workflow: score, dedupe, register action.
• Build playbooks and templates for functional leads.
• Support local entity quarterly risk updates and escalation hygiene.
• Surface emerging risks (crypto, AI, multi-jurisdiction) for review.

Who You Are (Must-Haves)

• Mid-career (roughly 5 to 10 years) in operational risk, ERM, GRC, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets).
• Built or run a risk register from intake through reporting. Not framework design only.
• Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
• Hands-on GRC platform experience.
• Clear writing: risk statements, executive summaries, board-ready tables.
• SEC/FINRA familiarity or equivalent regulated-environment experience.

Who You Might Be (Nice-To-Haves)

• Broker-dealer, clearing, or custody operations context.
• High-growth fintech where you stood up ERM while the business scaled.
• Crypto / digital assets risk register exposure.
• Multi-entity, multi-jurisdiction risk consolidation.
• Jira service desk or structured intake workflow design.
• COSO ERM / ISO 31000 implementation as an operator.
• Prior work drafting board or risk committee reporting.

How We Take Care of You:

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card

Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.