Manager, Enterprise Risk Management

UPMC is hiring a

strategic and collaborative Manager, Enterprise Risk Management. Apply today! 

This position will be based out of Pittsburgh, PA and will have the potential to work from home on a hybrid schedule which includes some days at home and some days in office per week. 

Responsibilities: 

Enterprise Risk Framework & Governance
• Support execution of UPMC’s ERM framework aligned with leading practices, such as COSO ERM, and tailored to a complex, integrated payer-provider health system.
• Support ERM governance processes, including executive risk workgroups, leadership-level reporting, and preparation of materials for senior leadership forums.
• Coordinate alignment with risk owners and other risk-related functions across the organization to promote consistent risk communication and follow-up.
• Contribute to the development and use of enterprise risk indicators, risk themes, and related monitoring approaches in collaboration with executive leadership and risk owners.
Risk Identification & Assessment
• Facilitate enterprise-level risk assessment activities with executive leadership and cross-functional risk owners.
• Identify cross-functional risks, interdependencies, concentrations, and emerging enterprise-wide themes.
• Translate risk assessment inputs into a clear and actionable enterprise risk profile that supports executive-level prioritization and decision-making.
Risk Response & Monitoring
• Partner with risk owners to monitor risk response strategies, track progress, and synthesize updates across business areas.
• Maintain a clear distinction between ERM coordination and operational ownership of risk response activities.
• Support forward-looking discussion of emerging risks, trends, and potential enterprise implications.

Reporting & Executive Communication
• Prepare concise, insightful ERM reporting for executive leadership, including quarterly updates that support Audit & Compliance Committee reporting.
• Translate complex risk information into clear, decision-oriented messaging tailored to senior leadership audiences.
• Support preparation for Executive ERM Steering Committee sessions, including meeting materials, discussion summaries, and follow-up items.
Integration & Advisory Support
• Serve as a connector across clinical, operational, financial, strategic, and corporate domains to support enterprise-level risk insight.
• Partner with Internal Audit to support alignment between ERM insights and audit planning, while preserving Internal Audit independence.
• Support risk-informed discussion and decision-making by helping leadership understand emerging risks, risk tradeoffs, and enterprise implications.
Culture & Capability Building
• Promote consistent ERM practices by reinforcing risk ownership, accountability, and shared responsibility across the organization.
• Contribute to ERM tools, templates, guidance, and communication materials that support consistent practices across diverse business areas.
• Provide guidance to analysts, staff, or other colleagues supporting ERM activities, as applicable.

*Performs in accordance with system-wide competencies/behaviors.

*Performs other duties as assigned.