Program Manager of Enterprise Risk Management (ERM) and Governance, Risk Management, and Compliance (GRC) tools

The Program Manager of Enterprise Risk Management (ERM) and Governance, Risk Management, and Compliance (GRC) tools implements strategies that identify, assess, and mitigate risks across the organization. The Program Manager possesses a deep understanding of enterprise risk management principles, regulatory compliance, and serves as the expert in implementation and utilization of GRC tools to streamline and enhance risk management processes.

What you will do here:

• Enterprise Risk Management: Assist ERM leadership in the development of enterprise-wide risk policies and strategies. Implement enterprise-wide risk management programs, projects and associated processes in alignment with organizational goals. Conduct risk assessments to identify potential threats and vulnerabilities across business units. Collaborate with stakeholders to establish risk tolerance levels and risk mitigation plans.


• GRC Tool Implementation and Management: Lead the selection, implementation, and optimization of Governance, Risk, and Compliance (GRC) tools. Customize GRC tools to meet the specific needs of the organization and ensure seamless integration with existing systems. Provide training and support to users on GRC tools, ensuring efficient utilization across departments.


• ERM Project Leadership: Assist ERM leadership in aligning and maintaining a Three Lines of Defense framework Extensive collaboration across the enterprise to ensure understanding and adoption of the framework and key concepts.


• Risk Communication and Reporting: Develop and maintain a robust reporting system to communicate risk profiles and mitigation strategies to key stakeholders. Prepare regular reports for senior leadership, highlighting key risk indicators and the effectiveness of risk mitigation measures.


• Cross-Functional Collaboration: Develop and build out an inventory of risk processes across the organization. Collaborate with cross-functional teams, including IT, legal, finance, and operations, to ensure a holistic approach to risk management. Foster a risk-aware culture by promoting communication and awareness of risk-related issues at all levels of the organization.


• Continuous Improvement: Monitor and evaluate the effectiveness of risk management processes and GRC tools. Recommend and implement improvements to enhance the organization's overall risk posture.


• Perform other job-related duties as assigned.

What you will need:

• Bachelor's degree in Risk Management, Business, Information Technology, or related field; or equivalent combination of education and experience required.


• 7+ years of Risk Management, Compliance, Project Management, and/or Operational Analysis experience required.


• Proven experience in enterprise risk management required.


• In-depth knowledge of relevant laws, regulations, and industry standards required.


• Strong analytical and problem-solving skills required.


• Strong communication and interpersonal skills required.


• Project management experience with the ability to lead and coordinate cross-functional teams required.


• Balance strategic planning with hands-on implementation required.


• Experience with GRC tools implementation required.


• Certified Information Systems Security Professional (CISSP) preferred.


• Certified in Risk and Information Systems Control (CRISC) preferred.


• Certified Information Security Manager (CISM) preferred.

We are proud to be an EEO/AA employer M/F/D/V. We maintain a drug-free workplace and perform pre-employment substance abuse testing.

For additional information about our organization, careers, and benefits visit: http://www.desertfinancial.com/careers.