Program Manager, Enterprise Risk Management

Google•Washington, DC

2d•$136,000 - $197,000

About The Position

The Alphabet Enterprise Risk Management team's mission is to improve risk accountability and transparency across Google through a common governance framework and aligned risk management practices. As part of this team, you will play a key role in providing management and our board of directors assurance that we have an enterprise risk framework that is relevant, adequately frames, informs, monitors, and actions our risks in a fast-paced and ever-changing business. This role supports all aspects of the enterprise-wide risk management program, and will interact with leaders across the organization. Responsibilities include identification of enterprise-wide risks, development and implementation of methodologies for the assessment of risk through the organization, and reporting and monitoring risk mitigation progress. Emphasis will also be placed on building sustainable risk management practices and capabilities throughout the organization through targeted stakeholder engagement and training opportunities.

Requirements

Bachelor's degree or equivalent practical experience.
7 years of experience in compliance, risk management, investigation, auditing, legal, or consulting.
Experience in developing and implementing risk management frameworks, including facilitating risk assessments and control self-assessments.
Experience in planning and executing cross-functional, enterprise-wide projects.
Experience with technology risk domains and regulations (e.g., NIS2, GDPR, NIST).

Nice To Haves

Experience in data analytics.
Demonstrated experience influencing cross-functionally, and with leadership-level audiences.
Ability to bring structure to complex, ambiguous environments, with a talent for analyzing fragmented inputs, synthesizing key attributes, and delivering balanced, effective recommendations and results.
Excellent project management, verbal, and written communication skills.

Responsibilities

Implement and maintain an enterprise Risk and Control Self-Assessment (RCSA) process aligned with regulatory standards and industry best practices.
Consult with cross-functional stakeholders to define mitigation strategies, key risk indicators, and performance metrics.
Deploy processes and technology to provide executive leadership with transparent reporting on risk trends, issues, and resolution status.
Prepare and deliver high-level risk summary reports for executive and board-level audiences.
Coordinate with global teams including Legal, Finance, and Product to support strategic initiatives and management requests.