This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an ERM Program Manager based in Canada.

We are seeking an experienced Enterprise Risk Management (ERM) professional to oversee the execution and continuous improvement of risk management operations within a fast-growing, regulated financial services environment. In this hands‑on role, you will coordinate risk assessments, maintain enterprise risk registers, and ensure that risk information is accurate, consistent, and actionable. You will collaborate with stakeholders across Legal, Compliance, Finance, Product, Security, and Operations to identify emerging risks and drive effective mitigation plans.

You will also develop key risk indicators, validate risk assessments with functional owners, and prepare executive‑level and board‑ready reporting. Working within an established ERM framework, you will help strengthen risk visibility, accountability, and governance across multiple entities and jurisdictions. This remote opportunity is ideal for a detail‑oriented skilled who combines strong risk management expertise with excellent communication skills and the ability to influence stakeholders without direct authority.

Accountabilities

Enterprise Risk Management Execution

Manage the end‑to‑end ERM intake process, collecting risk information through tickets, functional interviews, surveys, incident reports, and operational channels.

Risk Register Management

Maintain functional and enterprise risk registers within the designated Governance, Risk, and Compliance (GRC) platform, ensuring accurate documentation of risk owners, inherent and residual scores, mitigation measures, and status updates.

Risk Assessment and Scoring

Apply the established ERM risk scoring model, work with risk owners to validate residual risk ratings, and ensure consistent assessment practices across business functions.

Risk Taxonomy and Classification

Map identified risks to established Level 1 and Level 2 risk categories and relevant enterprise risk scenarios to support consistent classification, analysis, and reporting.

Stakeholder Coordination

Organize regular check‑ins with functional risk leads, follow up on outstanding actions and blockers, consolidate inputs, and ensure alignment between functional and enterprise‑level risk assessments.

Mitigation Planning and Escalation

Track risk mitigation plans, action owners, target completion dates, and progress. Escalate overdue actions, unresolved issues, and significant risk exposures to the appropriate stakeholders.

Key Risk Indicators (KRIs)

Collaborate with data owners to define and monitor relevant KRIs, using appropriate proxy metrics where data collection or measurement capabilities are still developing.

Executive and Board Reporting

Prepare clear, accurate, and decision‑oriented ERM reports, executive summaries,



risk dashboards, and board materials that communicate the organization’s risk exposure and mitigation progress.

ERM Governance and Coordination

Support ERM Working Group meetings by preparing agendas, documenting minutes, tracking decisions, and following up on assigned actions.

Risk Intake Triage

Operate the risk intake workflow by evaluating and scoring incoming items, identifying duplicates, and recording relevant risks and follow‑up actions in the appropriate systems.

Process Documentation and Enablement

Develop practical playbooks, templates, and guidance materials to help functional risk leads apply consistent risk identification, assessment, and reporting practices.

Entity‑Level Risk Management

Coordinate quarterly risk updates across local entities, ensuring timely submissions, consistent reporting, and appropriate escalation of significant issues.

Emerging Risk Monitoring

Identify and surface emerging risks related to cryptocurrency, artificial intelligence, regulatory developments, and multi‑jurisdictional operations for further assessment and review.

Requirements

Professional Experience

Approximately 5–10 years of experience in operational risk, Enterprise Risk Management (ERM), Governance, Risk, and Compliance (GRC), or compliance program management within a regulated financial institution, fintech, broker‑dealer, or capital markets setting.

Hands‑On ERM Execution

Demonstrated experience managing risk registers from initial intake and assessment through mitigation tracking and executive reporting. Practical operational experience is essential, beyond framework design alone.

Risk Assessment Expertise

Strong understanding of risk identification, inherent and residual risk scoring, mitigation planning, risk ownership, and ongoing monitoring.

GRC Platforms

Practical experience using GRC platforms to manage risk registers, workflows, controls, assessments, and reporting.

Stakeholder Management

Proven ability to coordinate and influence cross‑functional stakeholders across Legal, Compliance, Finance, Product, Security, and Operations without relying on direct reporting authority.

Regulatory Knowledge

Familiarity with SEC and FINRA requirements, or equivalent experience operating within a regulated financial services environment.

Reporting and Communication

Excellent written communication skills, with the ability to develop clear risk statements, executive summaries, structured risk tables, and board‑ready materials.

Risk Governance and Metrics





Experience tracking mitigation actions, monitoring operational risk indicators, defining KRIs, and escalating issues according to established governance processes.

Analytical and Organizational Skills

Strong attention to detail, sound judgment, and the ability to consolidate complex information from multiple sources into actionable insights.

Autonomy and Accountability

A proactive, hands‑on approach to program execution, with the ability to manage multiple priorities, maintain accurate documentation, and deliver reporting within established deadlines.

Preferred Financial Services Experience

Exposure to broker‑dealer, clearing, or custody operations, particularly in environments with complex operational and regulatory requirements.

Preferred Fintech Experience

Experience implementing or operating ERM programs within a high‑growth fintech or financial services organization.

Preferred Digital Asset Risk Knowledge:

Familiarity with cryptocurrency or digital asset risk management and associated operational considerations.

Preferred Multi‑Entity Experience

Experience consolidating risk information across multiple legal entities, business units, or jurisdictions.

Preferred Workflow and Framework Knowledge:

Familiarity with Jira Service Management, structured risk intake workflows, COSO ERM, or ISO 31000, particularly from an operational implementation perspective.

Preferred Board Reporting Experience

Previous experience preparing materials for board meetings, risk committees, or senior leadership governance forums.

Location and Work Arrangement

Based in Canada, with the ability to work remotely within the applicable hiring and employment arrangements.

Benefits

Market-competitive salary.

Stock options, offering the opportunity to participate in the company's long‑term growth.

Health benefits.

One‑time home‑office setup allowance of

USD $500

for new hires.

Monthly stipend of

USD $150 , provided through a Brex card, to support eligible work‑related expenses.

How Jobgether works We use an

AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top‑fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre‑contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

📌 ERM Program Manager (Winnipeg)
🏢 Jobgether
📍 Winnipeg