Program Manager, Enterprise Risk Management

Capital Metropolitan Transportation Authority•Austin, TX

3d•Hybrid

About The Position

The Program Manager, Enterprise Risk Management, reports directly to the Director, Enterprise Risk Management, and supports and advances CapMetro’s enterprise-wide ERM program. The role coordinates risk identification, assessment, monitoring, reporting, and continuous improvement, working with executives, department leaders, project teams, and other stakeholders. It provides consultative guidance, tools, and expertise to business units in a facilitative and advisory capacity and supports the Organizational Strategy & Projects leadership team in embedding risk-informed decision-making and fostering a risk-aware culture. The position administers and improves ERM governance, policies, procedures, tools, metrics, and templates; maintains the enterprise risk register and program documentation; and develops risk reports, dashboards, maps, trend analyses, and communications for executives, the Board, and governance groups. It partners with business units and strategic initiative, capital project, program, and portfolio teams to assess and manage risks, facilitate workshops, monitor mitigation activities, and promote sound risk-based decisions. The role also supports organizational change, risk awareness, analytical capabilities, and CapMetro’s Safety Management Systems process. Work is generally performed in an office environment with minimal exposure to unpleasant or hazardous conditions. This hybrid position’s onsite presence is guided by collaboration needs, stakeholder interactions, and role responsibilities; people leaders set expectations, and incumbents are generally encouraged to work 8 to 12 days in the office per month. Mobility status may change based on business needs or organizational decisions. Visa sponsorship is not available; applicants must be currently authorized to work in the United States.

Requirements

Bachelor’s degree in risk management, business, economics, finance, public administration, management, or a related field.
Eight years of relevant experience in risk management, audit, compliance, governance, strategic planning, public administration, or related disciplines.
Three years of experience leading enterprise assessments, governance initiatives, and cross-functional business programs.
Two years of management experience managing employees or projects.
Comprehensive knowledge of ERM principles, frameworks, and practices, including risk appetite, risk tolerance, COSO ERM, and ISO 31000.
Strong analytical and critical-thinking skills, including qualitative and quantitative risk analysis, trend identification, impact evaluation, and synthesis of data from multiple sources.
Strong organizational and project management skills, including management of multiple priorities, deadlines, deliverables, and program documentation.
Ability to develop, maintain, and continuously improve systems, processes, documentation, and records supporting risk management and program operations.
Proficiency developing reports, dashboards, presentations, and other materials that communicate risk information and recommendations effectively.
Strong working knowledge of Microsoft Office, including Excel, PowerPoint, and SharePoint, and experience developing reporting tools, dashboards, document repositories, and executive-level presentations.
Excellent verbal, written, presentation, and facilitation skills, including communicating complex concepts to diverse technical and non-technical audiences and adapting messages to stakeholder needs.
Ability to influence, collaborate, build consensus, and maintain productive relationships across organizational levels.
Sound judgment, professionalism, initiative, and commitment to continuous learning and improvement.
Must be currently authorized to work in the United States; visa sponsorship is not available.
Ability to stand and sit frequently throughout an eight-hour period and reach vertically and horizontally.
Ability to use a telephone or headset equipment.
Ability to lift and move materials weighing up to 20 pounds.
Ability to work at a computer terminal for 6–8 hours a day and function in an environment with constant interruptions.
Regular and predictable attendance at the assigned work location is an essential function.

Nice To Haves

Professional risk management qualification such as Certified Risk Management Professional (CRMP), Certification in Risk Management Assurance (CRMA), Enterprise Risk Manager (ERM), International Certificate in Enterprise Risk Management (IRM), or Financial Risk Manager (FRM).
Experience in public transportation, infrastructure, utilities, government, aviation, or large capital project environments.

Responsibilities

Support implementation, governance, and continuous improvement of the ERM program, including risk appetite, risk tolerance, policies, procedures, tools, metrics, and templates.
Integrate risk analysis, management, and recommendations into strategic planning, organizational objectives, and business decision-making.
Develop enterprise risk reports, dashboards, risk maps, trend analyses, and communications for executives, the Board, and governance groups.
Maintain ERM documentation, risk records, templates, reporting artifacts, and document repositories, ensuring accuracy, completeness, version control, and retention.
Maintain the enterprise risk register and facilitate enterprise and departmental risk assessments; identify, assess, prioritize, and communicate risks and opportunities affecting strategic and operational objectives.
Monitor risk trends, emerging risks, key risk indicators, and enterprise exposures against established risk appetite and tolerance thresholds, escalating material deviations as appropriate.
Develop and enhance risk monitoring and mitigation practices, including early warning systems, preventive controls, mitigation tracking, post-event reviews, lessons learned, and continuous improvement.
Promote risk awareness, collaboration, and transparency through stakeholder engagement, education, coaching, and constructive communication.
Advise business leaders and facilitate risk-based decision-making while reinforcing business ownership and accountability for risk.
Support change management and organizational transition initiatives by guiding cross-functional teams in adopting new processes, tools, and analytical practices.
Develop organizational capabilities, methodologies, and practices that strengthen risk analysis and embed risk discipline across the organization.
Partner with strategic initiative, capital project, program, and portfolio teams to assess, review, and manage risks associated with major capital investments and strategic initiatives.
Facilitate project risk workshops and monitor risk mitigation activities.
Perform responsibilities in support of CapMetro’s mission, values, strategic goals, and organizational excellence.
Support CapMetro’s Safety Management Systems process by following safety and security policies, considering safety in every action, and reporting safety and security concerns.
Perform other duties as required or assigned in support of the CapMetro Strategic Plan.