Risk and Compliance Manager​

POSITION PURPOSE

This role sits within the Risk Management, Audit and Compliance function and partners with the Risk and Compliance Director to build, mature, and operate YPO's enterprise risk management (ERM) program and infrastructure, including the risk register, key risk indicator (KRI) framework, reporting and dashboards, and control library. Working enterprise-wide across YPO's global functions and regions, the role contributes to ERM strategy and program design, risk governance and committee structure, and risk education and awareness, and provides policy advisory support and clear communication to internal and external stakeholders. The role combines strategic framework-building with hands-on execution, with significant autonomy over the infrastructure it builds and strong advisory influence with business and functional leaders, who retain ownership of remediation, while Internal Audit retains independent control testing. It reports to the Risk and Compliance Director and works alongside the Internal Assurance Manager and Tax Accounting Manager.

PRIMARY RESPONSIBILITIES

Enterprise Risk Register & Governance

• Lead the design and ongoing maintenance of YPO's enterprise risk register in partnership with the Director, including risk identification, scoring methodology, and ownership assignment.
• Facilitate periodic risk workshops with business and functional leaders across the organization to keep the register current.
• Maintain a refresh cadence and ensure risks are actively owned by business leaders, not just recorded.
• Contribute to the design of risk governance and committee structures, and develop and deliver risk education and awareness across the organization.

Key Risk Indicators (KRIs), Reporting & Dashboards

• Develop and maintain a KRI framework tied to risks identified in the register, with defined thresholds and escalation paths.
• Build scalable risk reporting and dashboards that track KRI trends and risk exposure over time, moving the program away from manual spreadsheets.
• Evaluate available reporting tools and platforms, including existing YPO systems and dedicated risk and compliance tools, and recommend an effective, scalable reporting approach.
• Translate risk data into clear trends and insights that support decision-making by business and functional leaders, and develop internal risk communication tools.

Control Library

• Catalog and document existing controls across the organization, mapping each to the risks it mitigates.
• Evaluate whether existing controls are adequately designed to mitigate their mapped risks.
• Advise and make recommendations to business leaders on control redesign or modification where gaps exist. This role advises and recommends; business leaders own remediation decisions, documentation, and implementation.
• Coordinate with Internal Audit so that control design and documentation (owned by this role) and independent testing of operating effectiveness (owned by Internal Audit) remain complementary rather than duplicative.

Policy Advisory & Communication

• Provide guidance to stakeholders across the organization on compliance with internal policies and applicable external requirements.
• Draft, redline, and help maintain internal policy documents in partnership with policy owners.
• Translate risk and compliance findings into clear, actionable communication for department and business stakeholders.

Vendor Insurance Review

• Working with the Director and the contracts and procurement team, review insurance limits and coverage types for vendors as part of the contracting and procurement workflow, checking against standard organizational requirements and escalating exceptions.
• Communicate insurance requirements to stakeholders and vendors.

SKILLS

• Proven ability to work independently with initiative, to be resourceful and self-motivated and proactively manage multiple tasks and projects simultaneously.
• Exceptionally strong administrative and organizational skills; commitment to detail, methodology and accuracy; effective time management and prioritization skills.
• Excellent communication skills with an emphasis on proactivity, clarity, thoroughness, and diligence.
• Proven characteristics of intellectual curiosity, responsibility, determination, creativity, flexibility, drive, and self-confidence.
• Ability to maintain discretion and integrity of confidential and sensitive information.
• Ability to connect the dots, integrate ideas, influence, partner, build consensus and foster strategic trusted advisor relationships with members and all levels of the organization.
• Ability to identify problems, research alternatives, provide solutions and/or resolve issues in a timely manner. Anticipates customer needs and delivers with clarity.
• Analytical with extremely high judgement, structured thinking and creative problem solving.
• Possesses a distinct global mindset, sensitive to local and international customs and protocols, with the ability to work effectively across functions and regions.
• Proficiency in Microsoft Office; Salesforce experience a plus. Hands-on experience building risk reporting and dashboards, with the ability to evaluate and recommend reporting tools. Keen desire to learn and apply new technologies and tools.
• Great sense of humor and works with integrity and humility.

EXPERIENCE/BACKGROUND

• 5+ years of experience in enterprise risk management, internal audit, or compliance, with direct experience building or operating risk registers, KRI frameworks, or control documentation.
• Working knowledge of COSO ERM and COSO Internal Control–Integrated Framework required.
• Demonstrated ability to evaluate control design (not just confirm existence) and communicate recommendations persuasively to business and functional leaders outside the risk function.
• Experience building risk reporting or dashboards and moving manual processes toward more scalable tools.
• Strong policy drafting and written…