POSITION PURPOSE
This role sits within the Risk Management, Audit and Compliance function and partners with the Risk and Compliance Director to build, mature, and operate YPO's enterprise risk management (ERM) program and infrastructure, including the risk register, key risk indicator (KRI) framework, reporting and dashboards, and control library. Working enterprise-wide across YPO's global functions and regions, the role contributes to ERM strategy and program design, risk governance and committee structure, and risk education and awareness, and provides policy advisory support and clear communication to internal and external stakeholders. The role combines strategic framework-building with hands-on execution, with significant autonomy over the infrastructure it builds and strong advisory influence with business and functional leaders, who retain ownership of remediation, while Internal Audit retains independent control testing. It reports to the Risk and Compliance Director and works alongside the Internal Assurance Manager and Tax Accounting Manager.
PRIMARY RESPONSIBILITIES
Enterprise Risk Register & Governance
- Lead the design and ongoing maintenance of YPO's enterprise risk register in partnership with the Director, including risk identification, scoring methodology, and ownership assignment.
- Facilitate periodic risk workshops with business and functional leaders across the organization to keep the register current.
- Maintain a refresh cadence and ensure risks are actively owned by business leaders, not just recorded.
- Contribute to the design of risk governance and committee structures, and develop and deliver risk education and awareness across the organization.
Key Risk Indicators (KRIs), Reporting & Dashboards
- Develop and maintain a KRI framework tied to risks identified in the register, with defined thresholds and escalation paths.
- Build scalable risk reporting and dashboards that track KRI trends and risk exposure over time, moving the program away from manual spreadsheets.
- Evaluate available reporting tools and platforms, including existing YPO systems and dedicated risk and compliance tools, and recommend an effective, scalable reporting approach.
- Translate risk data into clear trends and insights that support decision-making by business and functional leaders, and develop internal risk communication tools.
Control Library
- Catalog and document existing controls across the organization, mapping each to the risks it mitigates.
- Evaluate whether existing controls are adequately designed to mitigate their mapped risks.
- Advise and make recommendations to business leaders on control redesign or modification where gaps exist. This role advises and recommends; business leaders own remediation decisions, documentation, and implementation.
- Coordinate with Internal Audit so that control design and documentation (owned by this role) and independent testing of operating effectiveness (owned by Internal Audit) remain complementary rather than duplicative.
Policy Advisory & Communication
- Provide guidance to stakeholders across the organization on compliance with internal policies and applicable external requirements.
- Draft, redline, and help maintain internal policy documents in partnership with policy owners.
- Translate risk and compliance findings into clear, actionable communication for department and business stakeholders.
Vendor Insurance Review
- Working with the Director and the contracts and procurement team, review insurance limits and coverage types for vendors as part of the contracting and procurement workflow, checking against standard organizational requirements and escalating exceptions.
- Communicate insurance requirements to stakeholders and vendors.
SKILLS
- Proven ability to work independently with initiative, to be resourceful and self-motivated and proactively manage multiple tasks and projects simultaneously.
- Exceptionally strong administrative and organizational skills; commitment to detail, methodology and accuracy; effective time management and prioritization skills.
- Excellent communication skills with an emphasis on proactivity, clarity, thoroughness, and diligence.
- Proven characteristics of intellectual curiosity, responsibility, determination, creativity, flexibility, drive, and self-confidence.
- Ability to maintain discretion and integrity of confidential and sensitive information.
- Ability to connect the dots, integrate ideas, influence, partner, build consensus and foster strategic trusted advisor relationships with members and all levels of the organization.
- Ability to identify problems, research alternatives, provide solutions and/or resolve issues in a timely manner. Anticipates customer needs and delivers with clarity.
- Analytical with extremely high judgement, structured thinking and creative problem solving.
- Possesses a distinct global mindset, sensitive to local and international customs and protocols, with the ability to work effectively across functions and regions.
- Proficiency in Microsoft Office; Salesforce experience a plus. Hands-on experience building risk reporting and dashboards, with the ability to evaluate and recommend reporting tools. Keen desire to learn and apply new technologies and tools.
- Great sense of humor and works with integrity and humility.
EXPERIENCE/BACKGROUND
- 5+ years of experience in enterprise risk management, internal audit, or compliance, with direct experience building or operating risk registers, KRI frameworks, or control documentation.
- Working knowledge of COSO ERM and COSO Internal Control–Integrated Framework required.
- Demonstrated ability to evaluate control design (not just confirm existence) and communicate recommendations persuasively to business and functional leaders outside the risk function.
- Experience building risk reporting or dashboards and moving manual processes toward more scalable tools.
- Strong policy drafting and written communication skills.
- Comfortable operating as an individual contributor with significant autonomy, balancing operational and advisory work with longer-cycle framework-building.
- Not-for-profit, membership organization, or similarly matrixed environment experience a plus.
- Experience in a global, event-driven, or member-based organization a plus.
EDUCATION/TRAINING/CERTIFICATION
- Bachelor's degree in business, finance, risk management, or a related field required; advanced degree a plus, not required.
- One or more of the following certifications preferred: RIMS-CRMP (Certified Risk Management Professional), CRMA (Certification in Risk Management Assurance), CCEP (Certified Compliance and Ethics Professional).
PHYSICAL REQUIREMENTS
- Ability to work flexible and/or extended hours as needed to accommodate members and team members in multiple time zones.
- Ability to work for extended hours at a computer screen.
- Willingness and ability to travel, domestically and internationally, without restrictions, approximately 5% per year.
Compensation at YPO is one part of a broader Total Rewards philosophy built to attract, motivate, and retain talented people in every country and function where we operate. We aim to be fair, consistent, and thoughtful stewards of our resources, and we ground pay decisions in market data, role scope, and internal equity rather than negotiation alone.
Compensation ranges are based on the associate's primary work location.
Because this role may be filled in more than one country, the applicable ranges are listed below by location:
For US applicants: USD 88,100–112,300 annually
We believe pay is only part of how YPO invests in its people. Associates are also eligible for performance-based bonus opportunities, remote work flexibility, and a comprehensive rewards package built around their wellbeing and growth. Your Talent Acquisition Business Partner will share the details specific to your location as part of the interview process.
EOE
YPO is an Equal Opportunity Employer. YPO takes pride in supporting a diverse workforce and demonstrates this through its policies and practices. YPO does not discriminate in recruiting, hiring, training, promotion, or other employment practices for reasons of race, color, religion, gender, national origin, age, sexual orientation, marital or veteran status, disability, or any other legally protected status.
