No applications. Teams find and message you directly.
Join Alpaca as an ERM Program Manager to lead operational risk management in a dynamic remote environment. Competitive salary and benefits included.
Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. Amongst our subsidiaries, Alpaca is a licensed financial services company, serving hundreds of financial institutions across 40 countries with our institutional-grade APIs. This includes broker-dealers, investment advisors, wealth managers, hedge funds, and crypto exchanges, totaling over 10 million brokerage accounts. Our global team is a diverse group of experienced engineers, traders, and brokerage professionals who are working to achieve our mission of opening financial services to everyone on the planet. We're deeply committed to open-source contributions and fostering a vibrant community, continuously enhancing our award-winning, developer-friendly API and the robust infrastructure behind it.
Your Role
This is a hands-on operator role. You will update risk registers yourself, run functional risk lead check-ins, and produce board materials. No direct reports.Things You Get To Do
- Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.
- Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.
- Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.
- Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.
- Apply the ERM Risk Scoring Model and push residual validation with risk owners.
- Track mitigation plans, action owners, target dates, and escalations.
- Define KRIs with data owners; use proxy metrics where instrumentation is still maturing.
- Produce leadership and board ERM materials.
- Support ERM Working Group agendas, minutes, and action tracking.
- Operate the intake triage workflow: score, dedupe, register action.
- Build playbooks and templates for functional leads.
- Support local entity quarterly risk updates and escalation hygiene.
- Surface emerging risks (crypto, AI, multi-jurisdiction) for review.
Who You Are (Must-Haves)
- Mid-career (roughly 5 to 10 years) in operational risk, ERM, GRC, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets).
- Built or run a risk register from intake through reporting. Not framework design only.
- Can coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
- Hands-on GRC platform experience.
- Clear writing: risk statements, executive summaries, board-ready tables.
- SEC/FINRA familiarity or equivalent regulated-environment experience.
Who You Might Be (Nice-To-Haves)
- Broker-dealer, clearing, or custody operations context.
- High-growth fintech where you stood up ERM while the business scaled.
- Crypto / digital assets risk register exposure.
- Multi-entity, multi-jurisdiction risk consolidation.
- Jira service desk or structured intake workflow design.
- COSO ERM / ISO 31000 implementation as an operator.
- Prior work drafting board or risk committee reporting.
How We Take Care of You:
- Competitive Salary & Stock Options
- Health Benefits
- New Hire Home-Office Setup: One-time USD $500
- Monthly Stipend: USD $150 per month via a Brex Card
Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.