ERM Program Manager
Alpaca · Operations · Mid · 1mo ago
Open to candidates across Americas.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across Americas.
“Remote - Americas”
Team of 400+ members spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- USD $500 one-time home-office setup stipend plus USD $150 per month via a Brex card.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As an ERM Program Manager, you will operate as a hands-on individual contributor reporting to the CISO / ERM Lead. You will run Alpaca's ERM intake cycle end-to-end, maintain functional and enterprise risk registers in Vanta, coordinate functional risk lead check-ins, validate residual scoring, track mitigation plans, and draft executive-level and board-ready risk materials.
What you'll do
- Run the ERM intake cycle end-to-end via ticket ingestion, interviews, surveys, and operational incident signals.
- Maintain functional and enterprise risk registers in Vanta, tracking mitigations, inherent/residual scores, and status.
- Coordinate functional risk lead check-ins, remove blockers, and normalize inputs into the enterprise view.
- Map risks to taxonomy categories, apply the scoring model, and validate residual risk scores with owners.
- Define Key Risk Indicators (KRIs) with data owners and track mitigation action plans through resolution.
- Produce leadership and board-ready ERM reporting, agendas, minutes, and playbooks.
What you bring
- 5 to 10 years of experience in operational risk, ERM, GRC, or compliance program management at a regulated financial institution.
- Hands-on experience running risk registers from intake through reporting.
- Demonstrated ability to coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
- Hands-on experience with GRC platforms (such as Vanta).
- Familiarity with SEC/FINRA regulations or equivalent regulated financial environments.
- Strong writing skills for drafting risk statements, executive summaries, and board-level reporting.
About Alpaca
Alpaca is a US-headquartered global brokerage infrastructure platform offering APIs for stocks, ETFs, crypto, and more to financial institutions across 40 countries.
View Alpaca profile & open roles →