ERM Program Manager

<div class="content-intro"><p><strong>Who We Are:</strong></p> <p><strong>Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure&nbsp;</strong>for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.<br><br>Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totalling over 10 million brokerage accounts.<br><br>Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.<br><br><strong>Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.</strong><br><br><strong>Our Team Members:</strong></p> <p>We're a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond!<br><br>We're searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.</p></div><div class="_3iDTPbvLZJ renderer-heading-wrapper" data-testid="renderer-heading-wrapper" data-level="2"> <p id="Your-Role" data-renderer-start-pos="6432"><strong>Your Role</strong></p> </div> <p data-renderer-start-pos="6443">This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports.</p> <p data-renderer-start-pos="6603">Alpaca has the ERM framework, taxonomy, and scoring model. As ERM Program Manager, you will own execution: intake from functional risk leads, risk register hygiene, residual scoring with risk owners, and board-ready reporting on schedule. You report to the <span data-highlighted="true" data-vc="highlighted-text">CISO</span> / ERM Lead and work closely with the ERM Working Group, functional risk leads, and local entity leaders.</p> <h2 id="Things-You-Get-To-Do" data-renderer-start-pos="7038">Things You Get To Do</h2> <ul class="ak-ul" data-indent-level="1"> <li> <p data-renderer-start-pos="7062">Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.</p> </li> <li> <p data-renderer-start-pos="7211">Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.</p> </li> <li> <p data-renderer-start-pos="7337">Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.</p> </li> <li> <p data-renderer-start-pos="7446">Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.</p> </li> <li> <p data-renderer-start-pos="7559">Apply the <a class="_2hGPVj98eZ _2i3C1kYbGa _2kH23qT6kp _1ubuxonXvL _34b3D2vc3e _1NDpvb6wH8 _2wtOC9vc3e _3e11vU6wH8 _0hSAgbHZdu _00uqCY98eZ _3xtjKN0Rl6 _0H9qDF6wH8 _24h04i2Njc _1mT5xdRAKS _0bjKvDcjp5 _0WKd3G4z3T _23rrnHswLo _1UtDYzM7Tp _32C2rk98eZ _0i9AWA0Rl6 _0mm6KQ6wH8 _10n1R5M7Tp _0DCa9DjOvk _3932vv0Rl6 _02cRtH6wH8 _1B4rbIswLo _0clgaMM7Tp _3WzCGijOvk _0NqVRt0Rl6 _3BKYwu6wH8 _3sFUREDGiy _0CMRbkAwSC _2nTuUYWfPD _3ADzdEWfPD _1warJ9WfPD _4scvAwWyeI" href="https://alpaca.atlassian.net/wiki/spaces/ER/pages/4310892545" data-renderer-mark="true" data-is-router-link="false" data-testid="link-with-safety">ERM Risk Scoring Model</a> and push residual validation with risk owners.</p> </li> <li> <p data-renderer-start-pos="7642">Track mitigation plans, action owners, target dates, and escalations.</p> </li> <li> <p data-renderer-start-pos="7715">Define KRIs with data owners; use proxy metrics where instrumentation is still maturing.</p> </li> <li> <p data-renderer-start-pos="7807">Produce leadership and board ERM materials.</p> </li> <li> <p data-renderer-start-pos="7854">Support ERM Working Group agendas, minutes, and action tracking.</p> </li> <li> <p data-renderer-start-pos="7922">Operate the intake triage workflow: score, dedupe, register action.</p> </li> <li> <p data-renderer-start-pos="7993">Build playbooks and templates for functional leads.</p> </li> <li> <p data-renderer-start-pos="8048">Support local entity quarterly risk updates and escalation hygiene.</p> </li> <li> <p data-renderer-start-pos="8119">Surface emerging risks (crypto, AI, multi-jurisdiction) for review.</p> </li> </ul> <h2 id="Who-You-Are-(Must-Haves)" data-renderer-start-pos="8190">Who You Are (Must-Haves)</h2> <ul class="ak-ul" data-indent-level="1"> <li> <p data-renderer-start-pos="8218">Mid-career (roughly 5 to 10 years) in operational risk, ERM, <span data-highlighted="true" data-vc="highlighted-text">GRC</span>, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets).</p> </li> <li> <p data-renderer-start-pos="8403">Built or run a risk register from intake through reporting. Not framework design only.</p> </li> <li> <p data-renderer-start-pos="8493">Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.</p> </li> <li> <p data-renderer-start-pos="8612">Hands-on <span data-highlighted="true" data-vc="highlighted-text">GRC</span> platform experience</p> </li> <li> <p data-renderer-start-pos="8648">Clear writing: risk statements, executive summaries, board-ready tables.</p> </li> <li> <p data-renderer-start-pos="8724">SEC/<span data-highlighted="true" data-vc="highlighted-text">FINRA</span> familiarity or equivalent regulated-environment experience.</p> </li> </ul> <p class="_3iDTPbvLZJ renderer-heading-wrapper" data-testid="renderer-heading-wrapper" data-level="2">&nbsp;</p> <h2 id="Who-You-Might-Be-(Nice-To-Haves)" data-renderer-start-pos="8797">Who You Might Be (Nice-To-Haves)</h2> <ul class="ak-ul" data-indent-level="1"> <li> <p data-renderer-start-pos="8833">Broker-dealer, clearing, or custody operations context.</p> </li> <li> <p data-renderer-start-pos="8892">High-growth fintech where you stood up ERM while the business scaled.</p> </li> <li> <p data-renderer-start-pos="8965">Crypto / digital assets risk register exposure.</p> </li> <li> <p data-renderer-start-pos="9016">Multi-entity, multi-jurisdiction risk consolidation.</p> </li> <li> <p data-renderer-start-pos="9072">Jira service desk or structured intake workflow design.</p> </li> <li> <p data-renderer-start-pos="9131"><span data-highlighted="true" data-vc="highlighted-text">COSO</span> ERM / ISO 31000 implementation as an operator.</p> </li> <li> <p data-renderer-start-pos="9186">Prior work drafting board or risk committee reporting.</p> </li> </ul><div class="content-conclusion"><h3><strong>How We Take Care of You:</strong></h3> <ul> <li style="font-weight: 400; text-align: justify;"><span style="font-weight: 400;">Competitive Salary &amp; Stock Options</span></li> <li style="text-align: justify;">Health Benefits</li> <li style="font-weight: 400; text-align: justify;"><span style="font-weight: 400;">New Hire Home-Office Setup: One-time USD $500</span></li> <li style="font-weight: 400; text-align: justify;"><span style="font-weight: 400;">Monthly Stipend: USD $150 per month via a Brex Card</span></li> </ul> <p><em><span style="font-weight: 400;">Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.<br></span></em></p> <p><span style="font-size: 8pt;"><a href="https://files.alpaca.markets/disclosures/AlpacaRecruitmentPrivacyPolicy.pdf"><em><span style="font-weight: 400;">Recruitment Privacy Policy</span></em></a></span></p></div>