Mediabistro logo
job logo

Senior Enterprise Risk Management (ERM) Consultant – Governance & Risk Register

Dutech Systems Inc., Austin, TX, United States


We are seeking a highly experienced

Senior ERM Consultant

to design and implement a comprehensive

enterprise risk management framework , including risk governance workflows, risk scoring models, and enterprise risk register structure.
This role requires strong expertise in

risk governance, stakeholder engagement, and audit-ready documentation , with the ability to establish scalable processes for identifying, assessing, and managing organizational risks.
Key Responsibilities:

Design and implement

end-to-end risk governance workflows , including:

Risk identification and intake
Risk review and validation
Risk acceptance, mitigation, or transfer
Ongoing monitoring and reassessment

Develop and standardize the

enterprise risk register framework , including taxonomy and data structure
Define

risk scoring and prioritization models

(likelihood, impact, and ranking methodology)
Establish

roles and responsibilities

for risk owners, reviewers, and governance bodies
Design

escalation, reporting, and decision-making processes

for high-risk scenarios
Facilitate

stakeholder workshops

across business, technology, and security teams
Support

initial onboarding and population

of risks into the enterprise risk register
Produce

audit-ready documentation , including:

Risk register structure and definitions
Risk scoring methodology
Governance workflows and operating procedures

Provide

knowledge transfer and training

to internal teams to ensure long-term sustainability
Collaborate with cross-functional teams to align risk practices with organizational objectives
Key Deliverables:

Enterprise Risk Register Framework

Standardized templates, taxonomy, and structure

Risk Scoring & Prioritization Model

Likelihood and impact scales
Scoring methodology and prioritization logic

Risk Governance Model

Defined workflows for intake, review, acceptance, and monitoring
Roles and responsibilities matrix

Initial Risk Register Population

Documented risks reflecting current risk posture

Final Documentation Package

Comprehensive guidance and procedures for ongoing risk management

Required Qualifications:

8+ years

of experience in

Enterprise Risk Management (ERM)

or related field
Proven experience designing

risk register frameworks and governance models
Strong expertise in

risk scoring and prioritization methodologies
Experience defining and implementing

risk governance processes and workflows
Demonstrated ability in

stakeholder engagement, facilitation, and enablement
Strong skills in

documentation, reporting, and knowledge transfer
Experience delivering

audit-ready risk management documentation
Excellent communication and presentation skills
Preferred Qualifications:

Experience in

IT or Cybersecurity Risk Management
Familiarity with

regulatory or compliance frameworks
Experience working in

large enterprise or government environments
Certifications such as

CISM, CRISC, CISSP, or similar

(preferred but not required)

#J-18808-Ljbffr