ERM Program Manager

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an ERM Program Manager based in Canada.

We are seeking an experienced Enterprise Risk Management (ERM) professional to oversee the execution and continuous improvement of risk management operations within a fast-growing, regulated financial services environment. In this hands‑on role, you will coordinate risk assessments, maintain enterprise risk registers, and ensure that risk information is accurate, consistent, and actionable. You will collaborate with stakeholders across Legal, Compliance, Finance, Product, Security, and Operations to identify emerging risks and drive effective mitigation plans. You will also develop key risk indicators, validate risk assessments with functional owners, and prepare executive‑level and board‑ready reporting. Working within an established ERM framework, you will help strengthen risk visibility, accountability, and governance across multiple entities and jurisdictions. This remote opportunity is ideal for a detail‑oriented professional who combines strong risk management expertise with excellent communication skills and the ability to influence stakeholders without direct authority.

Accountabilities

Enterprise Risk Management Execution:

Manage the end‑to‑end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.

Risk Register Management:

Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.

Risk Assessment and Scoring:

Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.

Risk Taxonomy and Classification:

Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.

Stakeholder Coordination:

Organize regular check‑ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise‑level risk assessments.

Mitigation Planning and Escalation:

Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.

Key Risk Indicators (KRIs):

Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.

Executive and Board Reporting:

Prepare clear, accurate, and decision‑oriented ERM reports, executive summaries, risk dashboards, and board materials that communicate the organization’s risk exposure and mitigation progress.

ERM Governance and Coordination:

Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.

Risk Intake Triage:

Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow‑up actions in the appropriate systems.

Process Documentation and Enablement:

Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.

Entity‑Level Risk Management:

Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.

Emerging Risk Monitoring:

Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi‑jurisdictional operations for further assessment and review.

Requirements

Professional Experience:

Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker‑dealer, or capital markets environment.

Hands‑On ERM Execution:

Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.

Risk Assessment Expertise:

Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk own