ERM Program Manager - Alpaca

Who We Are

Alpaca is a US-headquartered, global leader in agent-first brokerage infrastructure for stocks, ETFs, options, crypto, fixed income, 24/5 trading, and more. We are a licensed financial services company, serving hundreds of financial institutions across 40 countries with institutional-grade APIs, totaling over 10 million brokerage accounts.

Our global team is a diverse group of experienced professionals working to open financial services to everyone on the planet. We are deeply committed to open-source contributions and continuously enhancing our award-winning, developer-friendly API and robust infrastructure. Alpaca is proudly backed by $400 million in funding from top-tier global investors.

Our Team Members

We are a dynamic team of 400+ globally distributed members who thrive working from our favorite places around the world, with teammates spanning the USA, Canada, Japan, Hungary, Nigeria, Brazil, the UK, and beyond. We are searching for passionate individuals eager to contribute to Alpaca's rapid growth. If you align with our core values—Stay Curious, Have Empathy, and Be Accountable—and are ready to make a significant impact, we encourage you to apply.

Your Role

This is a hands-on operator role. You will directly update risk registers, run functional risk lead check-ins, and produce board materials. This role has no direct reports.

Alpaca has an established ERM framework, taxonomy, and scoring model. As ERM Program Manager, you will own its execution: intake from functional risk leads, risk register hygiene, residual scoring with risk owners, and board-ready reporting on schedule. You will report to the CISO / ERM Lead and work closely with the ERM Working Group, functional risk leads, and local entity leaders.

Things You Get To Do

• Run the ERM intake cycle end to end: Ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.
• Maintain functional and enterprise risk registers in Vanta: owners, inherent and residual scores, mitigations, and status.
• Coordinate functional risk lead check-ins, chase blockers, and normalize inputs into the enterprise view.
• Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.
• Apply the ERM Risk Scoring Model and push residual validation with risk owners.
• Track mitigation plans, action owners, target dates, and escalations.
• Define KRIs with data owners; use proxy metrics where instrumentation is still maturing.
• Produce leadership and board ERM materials.
• Support ERM Working Group agendas, minutes, and action tracking.
• Operate the intake triage workflow: score, dedupe, register action.
• Build playbooks and templates for functional leads.
• Support local entity quarterly risk updates and escalation hygiene.
• Surface emerging risks (crypto, AI, multi-jurisdiction) for review.

Who You Are (Must-Haves)

• Mid-career (roughly 5 to 10 years) experience in operational risk, ERM, GRC, or compliance program management at a regulated financial institution (broker-dealer, fintech, or capital markets).
• Proven experience building or running a risk register from intake through reporting (not framework design only).
• Ability to coordinate Legal, Compliance, Finance, Product, Security, and Operations stakeholders without direct authority.
• Hands-on GRC platform experience.
• Clear writing skills: risk statements, executive summaries, board-ready tables.
• Familiarity with SEC/FINRA or equivalent regulated-environment experience.

Who You Might Be (Nice-To-Haves)

• Context in broker-dealer, clearing, or custody operations.
• Experience standing up ERM in a high-growth fintech while the business scaled.
• Exposure to crypto / digital assets risk registers.
• Experience with multi-entity, multi-jurisdiction risk consolidation.
• Jira service desk or structured intake workflow design experience.
• COSO ERM / ISO 31000 implementation as an operator.
• Prior work drafting board or risk committee reporting.

How We Take Care of You

• Competitive Salary & Stock Options
• Health Benefits
• New Hire Home-Office Setup: One-time USD $500
• Monthly Stipend: USD $150 per month via a Brex Card

Alpaca is proud to be an equal opportunity workplace dedicated to pursuing and hiring a diverse workforce.