ERM Program Manager

About the Position

ERM Program Manager

Remote - Americas

---

About Us

Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more.

Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totaling over 10 million brokerage accounts.

Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.

Alpaca is proudly backed by $400 million in funding from top-tier global investors including Portage Ventures, Spark Capital, Tribe Capital, Social Leverage, Horizons Ventures, Opera Tech Ventures, SBI Group, Derayah Financial, Unbound, Peak XV, Elefund, and Y Combinator.

---

Your Role

This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports.

Alpaca has the ERM framework, taxonomy, and scoring model. As ERM Program Manager, you will own execution: intake from functional risk leads, risk register hygiene, residual scoring with risk owners, and board-ready reporting on schedule. You report to the CISO / ERM Lead and work closely with the ERM Working Group, functional risk leads, and local entity leaders.

---

Responsibilities

• Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.
• Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.
• Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.
• Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.
• Apply the ERM Risk Scoring Model and push residual validation with risk owners.
• Track mitigation plans, action owners, target dates, and escalations.
• Define KRIs with data owners; use proxy metrics where instrumentation is still maturing.
• Produce leadership and board ERM materials.
• Support ERM Working Group agendas, minutes, and action tracking.
• Operate the intake triage workflow: score, dedupe, register action.
• Build playbooks and templates for functional leads.
• Support local entity quarterly risk updates and escalation hygiene.
• Surface emerging risks (crypto, AI, multi-jurisdiction) for review.

---

Requirements

• Mid-career (roughly 5 to 10 years) in operational risk, ERM, GRC, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets).
• Built or run a risk register from intake through reporting. Not framework design only.
• Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
• Hands-on GRC platform experience.
• Clear writing: risk statements, executive summaries, board-ready tables.
• SEC/FINRA familiarity or equivalent regulated-environment experience.

---

Nice to Have

• Broker-dealer, clearing, or custody operations context.
• High-growth fintech where you stood up ERM while the business scaled.
• Crypto / digital assets risk register exposure.
• Multi-entity, multi-jurisdiction risk consolidation.
• Jira service desk or structured intake workflow design.
• COSO ERM / ISO 31000 implementation as an operator.
• Prior work drafting board or risk committee reporting.

---

We Offer

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card

---

Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.

---

Apply for this job

indicates a required field

First Name

Last Name

Preferred First Name

Email

Country

Phone

Location (City)

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

---

LinkedIn Profile

Website

---

We use Greenhouse’s AI-powered Talent Matching tool to compare your application against our job requirements.

Learn more