Design, implement, and maintain a comprehensive enterprise risk management (ERM) framework and compliance program.
Develop and update internal policies, procedures, and controls to ensure regulatory compliance and risk mitigation.
Establish key risk indicators (KRIs) and key performance indicators (KPIs) to monitor the effectiveness of risk and compliance programs.
Conduct regular risk assessments across all business functions (e.g., operational, financial, legal, technology, and strategic) to identify, analyze, and prioritize risks.
Work with department heads to develop and implement risk mitigation strategies and action plans.
Oversee incident response planning and post-incident analysis related to compliance failures or risk events.
Stay current with changes in relevant laws, regulations, and industry standards (e.g., GDPR, CCPA, HIPAA, SOX, etc.) and translate them into actionable requirements for the business.
Manage and coordinate regulatory audits, internal audits, and external assessments.
Ensure all necessary licenses, certifications, and reporting obligations are met.
Develop and deliver mandatory compliance training and educational programs for employees on topics such as code of conduct, data privacy, and anti-corruption.
Prepare and present detailed reports on the company's risk profile, compliance status, and control effectiveness to senior management and the Board of Directors.

Bachelor’s degree in Business Administration, Finance, Law, or a related field. An advanced degree (MBA, JD) is a plus.
5+ years of experience in risk management, compliance, internal audit, or a related field, preferably within a regulated industry. 2+ years of management experience preferred.
Professional certification such as Certified Compliance and Ethics Professional (CCEP), Certified Internal Auditor (CIA), or relevant risk management certification (e.g., CRISC).
Deep knowledge of regulatory frameworks and compliance requirements relevant to the industry.
Strong analytical and problem-solving skills with the ability to assess complex situations and provide clear, decisive guidance.
Excellent written and verbal communication skills, including the ability to influence and persuade stakeholders at all levels.
Proven ability to lead projects, manage competing priorities, and meet deadlines.

Manager, Risk & Compliance

Key skills