Back to jobs
New

Corporate Risk Manager

Chicago, IL

Merge Storytelling and Technology

We bring together the minds and passions of creative pioneers, tech innovators, and data explorers to help ambitious clients solve business challenges and rise to the top. MERGE has enduring client partnerships with American Express, T-Mobile, LG, Subway, Kate Spade NY, Coach, The North Face, Meta, Adobe, BlueCross BlueShield, Abbott, Astellas, Supernus, CSL, GE Healthcare, Broward Health, Indiana University Health, Nationwide, and Morgan Stanley. With offices in Atlanta, Boston, Chicago, Denver, Kansas City, Montreal, New York City and Los Angeles. MERGE uses a talent-to-task process that enables clients to think higher and feel deeper about their customers. 

Promote Health, Wellness & Happiness

We are committed to promoting health, wellness and happiness in the world by partnering with purpose-driven clients in purpose-driven industries in healthcare, life science, and consumer products. Our deep vertical expertise and category insights stem from decade-long partnerships with our top clients.

Emerge to the Top of Your Career

At MERGE, we strive to create a superior work experience where talented and ambitious people grow. An experience that encourages people to think higher and feel deeper. An experience where people engage their minds and hearts to do the best work of their careers.

As our Corporate Risk Manager you will...

You’ll be the architect of our enterprise-wide risk framework, partnering with leaders across the business to identify, assess, and mitigate risks before they impact momentum. You’ll bring structure to complexity, help shape decisions, and ensure we’re resilient, compliant, and future-ready.

This is a high-impact role for a sharp, strategic thinker who thrives in dynamic environments—and knows how to balance risk control with business agility.

Be Accountable and Responsible

Enterprise Risk Strategy & Framework

  • Lead the development and implementation of MERGE’s enterprise risk management (ERM) framework, ensuring alignment with business strategy and operations
  • Establish and evolve our risk appetite and tolerance levels with input from executive leadership
    Embed risk intelligence into the organization's decision-making processes and planning cycles

Risk Identification & Assessment

  • Proactively identify strategic, operational, financial, technological, regulatory, cybersecurity, reputational, and compliance-related risks across the enterprise
  • Conduct in-depth, data-driven risk assessments using both qualitative and quantitative methodologies
  • Monitor internal and external risk trends—especially those relevant to a marketing and technology-driven organization
  • Analyze privacy and data security risks related to Personally Identifiable Information (PII), HIPAA, and other regulatory frameworks

Mitigation & Controls

  • Design and recommend scalable, practical risk mitigation strategies that align with business priorities
  • Partner with leaders across business units to implement and operationalize controls
  • Ensure mitigation plans are embedded, not bolted on—balancing rigor with usability

Risk Monitoring & Reporting

  • Develop and manage key risk indicators (KRIs), early warning systems, and risk heat maps
  • Deliver high-impact reporting and insights to senior management 
  • Support quarterly risk updates, Board presentations, and ad hoc deep-dives on priority risk areas

Crisis Management & Business Continuity

  • Play a key role in shaping and testing enterprise-wide crisis response and business continuity plans
  • Conduct scenario planning and tabletop exercises to prepare the organization for disruption
  • Help ensure operational continuity and recovery protocols are current, clear, and actionable

Regulatory Compliance & Governance

  • Ensure the company’s risk practices meet or exceed relevant legal, regulatory, and industry standards (GDPR, HIPAA, etc.)
  • Conduct and support contractual risk assessments for clients, partners, and vendors
  • Collaborate with Legal and Compliance teams to align enterprise risk with contractual obligations and third-party oversight

Stakeholder Collaboration & Engagement

  • Build strong relationships with senior leaders, Legal, Compliance, Internal Audit, and Insurance
  • Serve as a trusted advisor—communicating risk in a clear, actionable, and business-oriented way
  • Champion risk education and awareness across teams through training and engagement

These are the qualifications we’re looking for

  • Bachelor's degree in Finance, Risk Management, Business Administration, or a related field
  • Master’s degree (MBA or equivalent) or professional certification (e.g., CRM, FRM, CIA, CISA) preferred
  • 5–8+ years of progressive experience in enterprise risk management, internal audit, or regulatory compliance
  • Industry experience in marketing, technology, healthcare, or professional services is highly valuable
    Demonstrated expertise in contractual risk, data privacy, and cybersecurity controls
  • Proven application of risk methodologies such as ISO 31000, COSO ERM, and FAIR frameworks
  • Analytical powerhouse with the ability to distill complexity into clarity
  • Strong communicator who can build trust and drive action across levels and functions
  • Adept at using dashboards, reports, and visual storytelling to make risk insights resonate
  • Comfortable navigating ambiguity and driving structure in a high-growth, agile business
  • High integrity, sound judgment, and a pragmatic mindset focused on enabling—not inhibiting—growth

#LI-VM1

#LI-HYBRID

At MERGE, we’re committed to fostering an environment where our team members can thrive in both their careers and personal lives, ensuring they feel supported and empowered to succeed.

MERGE believes in transparency and equity. In accordance with state regulations, we’re proud to include salary ranges in our job postings to ensure fair compensation practices.

The salary range for this role is $175,000-$200,000, based on the individual’s skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.  

MERGE is proud to invest in benefits that include meaningful Medical, Dental, Vision, Life Insurance, 401K, Lifestyle Spending Account, Employer Paid Life & Disability Insurance, Flexible Time off & Holidays plus many other benefits and rewards.

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States.

And here’s how we live our values at MERGE

  • Ability. Mastering our craft
  • Agility. Delivering with a growth mindset
  • Humility. Collaborating for shared success

MERGE is proud to be an Equal Opportunity Employer

MERGE welcomes and celebrates diversity regardless of race, religion, color, national origin, gender, sexual orientation, veteran status or people with abilities. We believe that the more diverse we are, the more creative our work will be!

Create a Job Alert

Interested in building your career at MERGE? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in MERGE’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.