Enterprise Risk Manager

Subaru Of America Inc•Camden, NJ

64d•$92,100 - $115,000•Hybrid

About The Position

The Enterprise Risk Manager serves as the strategic leader driving Subaru of America's (SOA) enterprise risk management and business continuity framework, known as SOAR (Subaru's Enterprise Risk Program). This role ensures that risk awareness, mitigation, and resilience are embedded across the organization-empowering SOA to anticipate challenges, respond to disruptions, and safeguard critical business operations.

Requirements

Bachelor's Degree in risk management, law, or related business area required. Master's Degree Master of Legal Studies (MLS) or Juris Doctor (JD) preferred
At least 6-8 years of direct experience in risk management, business continuity, compliance, and/or enterprise risk management required
At least 2-4 years of experience with ISO 22301 preferred
Excellent verbal and written communication skills, including presentation skills.
Excellent project management skills and ability to handle multiple deadlines.
Experience leading cross-functional teams and projects in a time constrained environment.
Strategic thinking ability with capability to see the big picture and understand risks and opportunities.
Ability to work with minimal supervision, exercise good judgment, solve programs, think critically, multi-task, and prioritize work in a changeable environment.
Strong interpersonal, negotiation, and management skills.
Ability to collaborate with various business units and all levels of leadership to deliver results.
Strong analytical and strategic planning skills.
Excellent listening skills and customer service skills.
Change management skills, including the ability to implement new ideas and changes.
Excellent problem resolution skills.
Advanced computer and data analysis skills.
Proficient in Microsoft Office Suite products with advanced skills in Excel.
Knowledge of risk management frameworks, risk assessment methodologies, and risk management processes.
Understanding of business continuity planning, crisis management, and disaster recovery principles and practices.
Ability to demonstrate the highest degree of professionalism when dealing with sensitive and/or confidential matters.
Risk and Insurance Management Society (RIMS)-Certified Risk Management Professional (RIMS-CRMP) certification or equivalent upon hire or within, 1 1/2 years required
Certified Business Continuity Professional (CBCP) certification or equivalent upon hire or within 1 1/2 years required

Responsibilities

Develops, implements, and manages enterprise risk management strategies and systems to ensure that Subaru's enterprise risk program, SOAR, is embedded and operationalized throughout Subaru of America (SOA).
Develops, standardizes, implements, and maintains SOA's business continuity program to minimize disruption to employees, customers, and operations. Trains and provides guidance to risk owners. Coordinates plan integration and testing with SOA Crisis Communications and Information Technology (IT) teams and external suppliers.
Maintains responsibility for the annual SOAR assessment which includes risks and opportunities identification, likelihood and impact scoring, and aggregating and evaluating mitigation strategies utilizing stakeholder interviews and industry insights.
Prepares and presents updates on SOAR operations, risk register, heat map, dashboards, risk mitigation, and emerging exposures to SOA, affiliate and parent company leadership, and risk owners.
Develops, maintains, improves, and tests business continuity plans using established standards and customized solutions across SOA's business operations, ensuring consistency and alignment with crisis management manual and incident response plans. Stores plans in a central location.
Partners with risk owners to ensure that appropriate action is being taken to proactively address and mitigate risks.
Acts as a trusted advisor on risk issues, ensuring that current and emerging risks are properly identified, assessed, monitored, controlled, and reported.
Coordinates with Risk Management, Compliance, Information Security, Legal, Corporate Communications, and/or Internal Audit on risks assessments and incident response.
Monitors market trends, regulatory developments, and emerging risks to assess their potential impact on the SOA's risk profile.
Drives continuous improvement via capturing lessons learned after actual events to review and revise incident response plans and implement efficiency/productivity improvements.