Enterprise Risk Management Manager

Position Summary

The Manager, Enterprise Risk Management is responsible for designing, implementing, and managing ACCC's Enterprise Risk Management program. Reporting to the Chief Compliance & Risk Officer, this role will build the ERM framework from the ground up by establishing governance, methodologies, documentation, tools, and processes to identify, assess, monitor, mitigate, and report enterprise risks. As the program matures, the role transitions from implementation to ongoing management and continuous improvement.

Initial Program Development Responsibilities (First 12–24 Months)

·         Build and implement the Enterprise Risk Management Framework.

·         Develop the ERM Charter, Risk Appetite Statement, Risk Assessment Methodology, RCSA Methodology, and Risk Reporting Standards.

·         Establish the enterprise risk taxonomy and Enterprise Risk Register.

·         Develop the enterprise controls inventory and control ownership model.

·         Design and implement the Risk and Control Self-Assessment (RCSA) program.

·         Develop Key Risk Indicators (KRIs) and executive dashboards.

·         Establish governance processes for the Executive Risk Committee.

·         Develop Board-level enterprise risk reporting.

·         Evaluate Governance, Risk, and Compliance (GRC) technology.

·         Embed risk management into strategic planning and operational decision-making.

Ongoing Responsibilities

·         Facilitate enterprise-wide risk assessments.

·         Monitor enterprise risks and mitigation plans.

·         Maintain the enterprise controls inventory and monitor control effectiveness.

·         Support third-party risk management and operational resilience.

·         Coordinate business continuity planning activities.

·         Prepare quarterly executive and Board risk reports.

·         Provide ERM education and coaching.

·         Continuously improve the ERM program.

Requirements

Qualifications

Required

·         Bachelor's degree in Risk Management, Business, Finance, Accounting, Information Systems, Public Administration, or related field.

·         Five or more years of experience in enterprise risk management, operational risk, internal audit, governance, internal controls, or a related discipline.

·         Demonstrated experience designing, implementing, or significantly enhancing an ERM program, governance program, or internal control framework.