Enterprise Risk Manager

MX Technologies•Lehi, UT

4d•Onsite

About The Position

The Enterprise Risk Manager has an essential role in managing risks and implementing a risk management program to minimize risk to MX and its customers. As a member of the Compliance and Privacy department, the Risk Manager will be responsible for identifying, analyzing, and mitigating risk across the enterprise by collaborating with others across MX. There is a special focus on AI risk for both platform/product use and corporate use. To be successful in this role, the Risk Manager will need a strong understanding of risk management principles, business acumen, measurement skills, and strong collaboration.

Requirements

Bachelor's degree in Risk Management, Business Administration, Finance, Information Systems, Cybersecurity, or a related field, or equivalent practical experience.
5+ years of experience in Enterprise Risk Management (ERM), Operational Risk, Governance, Risk & Compliance (GRC), Information Security Risk, or a related discipline.
Experience conducting enterprise risk assessments and developing risk mitigation plans.
Experience using Governance, Risk & Compliance (GRC) platforms (e.g., ServiceNow GRC, Archer, OneTrust, MetricStream, AuditBoard, or similar).

Nice To Haves

Experience in fintech, financial services, banking, payments, or another highly regulated industry.
Experience developing or supporting enterprise AI governance and AI risk management programs.
Familiarity with AI governance frameworks such as the NIST AI Risk Management Framework (AI RMF) or ISO/IEC 42001.
Experience assessing third-party/vendor risk, including AI vendors and cloud service providers.
Knowledge of regulatory requirements related to financial institutions, privacy, and information security (e.g., FFIEC guidance, GDPR, CCPA, SOC 2, ISO 27001, PCI DSS).
Professional certifications such as: CRMP, CRISC, CISA, CISM

Responsibilities

Conduct periodic risk assessments and identify potential risks and vulnerabilities
Assess current controls to determine effectiveness in mitigating risks.
Document and monitor risk mitigation and remediation actions to report to the Risk Committee and escalate as needed.
Provide support for internal stakeholders as it relates to risk management processes and controls
Track risks in the risk register using a GRC tool and publish dashboards with the risk health of organizational functions
Facilitate Risk Committee Meetings, establishing the agenda, and documenting minutes with follow up actions.
Represent MX in various communities focusing on risk in the finance industry.
Be an advocate for safe AI adoption; driving risk analysis for AI use across MX platform and corporate, vendors, and data recipient customers.