Program Director, Enterprise Risk Management

UPMC is hiring a strategic and collaborative Program Director, Enterprise Risk Management. Apply today! 

This position will be based out of Pittsburgh, PA and will have the potential to work from home on a hybrid schedule which includes some days at home and some days in office per week. 

Responsibilities: 

Enterprise Risk Framework & Governance

• Manage and continuously enhance the organization's ERM framework aligned with leading practices (e.g., COSO ERM, ISO 31000, ASHRM), tailored to healthcare, insurance, clinical, and commercial business models.

• Support ERM governance structures, including executive risk committees and leadership-level reporting processes.

• Coordinate alignment with other risk structures and functions across the organization.

• Facilitate periodic review of risk appetite, risk tolerance, and key risk indicators in collaboration with executive leadership.

   

Risk Identification & Assessment

• Lead and facilitate enterprise-level and targeted risk assessments across clinical, operational, financial, regulatory, technology, cybersecurity, third-party, international, and emerging business areas.

• Partner with leaders of international and startup commercial entities to identify growth, regulatory, market entry, and execution risks.

• Identify interdependencies, concentrations, and enterprise-wide risk themes and escalate emerging risks as appropriate.

   

Risk Response & Monitoring

• Collaborate with risk owners to develop practical, well-defined risk response plans (mitigation, transfer, acceptance, or avoidance) with clear ownership and milestones.

• Monitor progress against risk response plans and escalate overdue, ineffective, or misaligned actions.

• Support scenario analysis and stress testing for high-impact strategic and emerging risks.

   

Reporting & Executive Communication

• Prepare concise, insightful ERM reporting for executive leadership, including dashboards, heat maps, trend analysis, and deep-dive risk profiles.

• Translate complex risk information into clear, decision-oriented messaging tailored to senior leadership audiences.

• Support regulatory, accreditation, and external stakeholder inquiries related to enterprise risk practices.

Integration & Advisory Support

• Integrate ERM into strategic planning, capital allocation, new initiatives, mergers and acquisitions, and international expansion activities.

• Partner with Internal Audit to align ERM insights with audit planning and coverage, while preserving independence.

• Serve as a trusted advisor to leadership on emerging risks, risk tradeoffs, and risk-informed decision-making.

   

Culture & Capability Building

• Promote a strong risk culture by reinforcing risk ownership, accountability, and shared responsibility across the organization.

• Develop ERM tools, templates, training materials, and guidance to support consistent practices across diverse business units.

• Mentor analysts, staff, or senior staff supporting ERM activities, as applicable.

   

• Performs in accordance with system-wide competencies/behaviors.

• Performs other duties as assigned.