Enterprise Risk Management Specialist

Overview

HIRING RANGE: $97,559 - $114,640

*18 month contract

The Enterprise Risk Management Specialist plays a critical role in supporting in the identification, assessment, and mitigation of risks across the organization. This position is responsible for supporting in the development of a comprehensive enterprise risk management framework that enables proactive risk identification and strategic decision-making. This role will collaborate with divisions to ensure a comprehensive approach to risk management that supports the OEB's mission, goals, and compliance requirements.

The incumbent will have an in-depth understanding of Enterprise Risk Management frameworks, governance, risk, and compliance (GRC) systems, and experience with implementing an ERM program, including helping to bring awareness of risk and controls to throughout the organization. In addition, strong interpersonal skills, including effective communication, collaboration, and facilitation of challenging discussions with senior leaders are critical for success in this role.

Responsibilities

This role involves assisting in the design and maintenance of a comprehensive enterprise risk management (ERM) framework to integrate risk management into the organization's decision-making processes. Key responsibilities include:

• Implement a new GRC model for ERM.
• Help design, implement, and mature a comprehensive ERM framework.
• Integrate ERM into organizational processes like project management, vendor management, and strategic planning by reviewing and recommending adjustments to current policies/procedures to ensure a consistent approach to ERM.
• Maintain policies and SOPs for ERM framework components (risk register, RCSAs, issue management, incident management)
• Partner, and consult with People Leaders and SMEs to identify, integrate risk frameworks and manage area-specific risks and support the development of tailored mitigation plans to enhance business integration practices.
• Analyze risk assessments to ensure accurate and consistent risk ratings.
• Perform independent risk control verification to evaluate effectiveness and resolve identified gaps.
• Track remediation plans and monitor progress on managing business risks.
• Identify trends, themes, and control deficiencies aligned with the organization’s risk taxonomy.
• Collaborate with cross-functional teams to design and implement risk management controls.
• Prepare formal reports and operational metrics, recommending solutions to enhance business service delivery for senior leader review and endorsement.
• Develop clear, informative, and transparent communications to ensure accurate corporate messaging and mutual understanding.
• Deliver timely, high-quality customer service to internal and external stakeholders using innovation, creative solutions, and professional approaches.

Qualifications

• A University degree in Business, Finance or a related discipline is required.
• Relevant professional designation considered an asset (e.g., Certified Public Accountant (CPA), Certified Risk Management Professional (CRMP), Certification in Risk Management Assurance (CRMA), Canadian Risk Management designation (CRM)).
• 3+ years of experience in compliance, audit, or enterprise risk management preferred.
• Five plus (5+) years of related experience in compliance, audit, or enterprise risk management within the Energy or public sector preferred.
• Strong knowledge of ERM governance, frameworks, and fundamentals, including relevant Frameworks (COSO, ISO).
• A deep understanding of the organization’s operations, public sector dynamics, and emerging risk trends.
• Thorough knowledge of industry standards for risk management.
• Ability to lead change and influence at all organizational levels.
• Excellent project management and analytical skills. Have the ability to take multiple projects to completion concurrently including facilitating, presenting, documenting, and reporting.
• Well-developed relationship management and influencing skills to work with various levels of the organizations and with both external and internal auditors.
• Critical thinker with strong business acumen.
• Excellent Proficiency in Microsoft Office Suite and familiarity with risk management systems and other data analytics tools.
• Excellent analytical and critical thinking skills; ability to absorb and synthesize new information quickly, understand complex situations and an attention to detail.
• Demonstrate professionalism, integrity, and commitment to public service.
• Deliver high-quality service with innovation and accountability.
• Promote equity, diversity, and inclusion in all interactions.