ERM Program Manager

Remote - Americas·Posted today

cryptoweb3blockchainfintechspark

<div class="content-intro">Who We Are: Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it. Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator. Our Team Members: We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond! We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.</div><div class="_3iDTPbvLZJ renderer-heading-wrapper" data-testid="renderer-heading-wrapper" data-level="2"> Your Role </div> This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports. Alpaca has the ERM framework, taxonomy, and scoring model. As ERM Program Manager, you will own execution: intake from functional risk leads, risk register hygiene, residual scoring with risk owners, and board-ready reporting on schedule. You report to the CISO / ERM Lead and work closely with the ERM Working Group, functional risk leads, and local entity leaders. <h2 id="Things-You-Get-To-Do" data-renderer-start-pos="7038">Things You Get To Do</h2> <ul class="ak-ul" data-indent-level="1"> <li> Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels. </li> <li> Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status. </li> <li> Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view. </li> <li> Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting. </li> <li> Apply the <a class="_2hGPVj98eZ _2i3C1kYbGa _2kH23qT6kp _1ubuxonXvL _34b3D2vc3e _1NDpvb6wH8 _2wtOC9vc3e _3e11vU6wH8 _0hSAgbHZdu _00uqCY98eZ _3xtjKN0Rl6 _0H9qDF6wH8 _24h04i2Njc _1mT5xdRAKS _0bjKvDcjp5 _0WKd3G4z3T _23rrnHswLo _1UtDYzM7Tp _32C2rk98eZ _0i9AWA0Rl6 _0mm6KQ6wH8 _10n1R5M7Tp _0DCa9DjOvk _3932vv0Rl6 _02cRtH6wH8 _1B4rbIswLo _0clgaMM7Tp _3WzCGijOvk _0NqVRt0Rl6 _3BKYwu6wH8 _3sFUREDGiy _0CMRbkAwSC _2nTuUYWfPD _3ADzdEWfPD _1warJ9WfPD _4scvAwWyeI" href="https://alpaca.atlassian.net/wiki/spaces/ER/pages/4310892545" data-renderer-mark="true" data-is-router-link="false" data-testid="link-with-safety">ERM Risk Scoring Model</a> and push residual validation with risk owners. </li> <li> Track mitigation plans, action owners, target dates, and escalations. </li> <li> Define KRIs with data owners; use proxy metrics where instrumentation is still maturing. </li> <li> Produce leadership and board ERM materials. </li> <li> Support ERM Working Group agendas, minutes, and action tracking. </li> <li> Operate the intake triage workflow: score, dedupe, register action. </li> <li> Build playbooks and templates for functional leads. </li> <li> Support local entity quarterly risk updates and escalation hygiene. </li> <li> Surface emerging risks (crypto, AI, multi-jurisdiction) for review. </li> </ul> <h2 id="Who-You-Are-(Must-Haves)" data-renderer-start-pos="8190">Who You Are (Must-Haves)</h2> <ul class="ak-ul" data-indent-level="1"> <li> Mid-career (roughly 5 to 10 years) in operational risk, ERM, GRC, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets). </li> <li> Built or run a risk register from intake through reporting. Not framework design only. </li> <li> Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority. </li> <li> Hands-on GRC platform experience </li> <li> Clear writing: risk statements, executive summaries, board-ready tables. </li> <li> SEC/FINRA familiarity or equivalent regulated-environment experience. </li> </ul>   <h2 id="Who-You-Might-Be-(Nice-To-Haves)" data-renderer-start-pos="8797">Who You Might Be (Nice-To-Haves)</h2> <ul class="ak-ul" data-indent-level="1"> <li> Broker-dealer, clearing, or custody operations context. </li> <li> High-growth fintech where you stood up ERM while the business scaled. </li> <li> Crypto / digital assets risk register exposure. </li> <li> Multi-entity, multi-jurisdiction risk consolidation. </li> <li> Jira service desk or structured intake workflow design. </li> <li> COSO ERM / ISO 31000 implementation as an operator. </li> <li> Prior work drafting board or risk committee reporting. </li> </ul><div class="content-conclusion"><h3>How We Take Care of You:</h3> <ul> <li style="font-weight: 400; text-align: justify;">Competitive Salary & Stock Options</li> <li style="text-align: justify;">Health Benefits</li> <li style="font-weight: 400; text-align: justify;">New Hire Home-Office Setup: One-time USD $500</li> <li style="font-weight: 400; text-align: justify;">Monthly Stipend: USD $150 per month via a Brex Card</li> </ul> Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce. <a href="https://files.alpaca.markets/disclosures/AlpacaRecruitmentPrivacyPolicy.pdf">Recruitment Privacy Policy</a></div>

Apply for this role