- Run the ERM intake cycle, including ticket ingestion, functional interviews, surveys, and ad hoc signals from incidents or operational channels.
- Maintain functional and enterprise risk registers in Vanta, including owners, inherent and residual scores, mitigations, and status.
- Coordinate functional risk lead check-ins, follow up on blockers, and normalize inputs into the enterprise view.
- Map risks to Alpaca's 15 L1 categories and Appendix C L2 subcategories to enterprise scenarios for reporting.
- Apply the ERM Risk Scoring Model and coordinate residual validation with risk owners.
- Track mitigation plans, action owners, target dates, and escalations.
- Define KRIs with data owners and use proxy metrics where instrumentation is still maturing.
- Produce leadership and board ERM materials.
- Support ERM Working Group agendas, minutes, and action tracking.
- Operate the intake triage workflow by scoring, deduplicating, and registering actions.