Enterprise Risk Manager

About Panorama

Panorama is a platform for social change driven by audacious thinking, radical collaboration, and bold action. We help our partners navigate multiple pathways from vision to impact based on their needs. Our mission is to maximize social impact by partnering with visionary leaders to co‑develop solutions to change systems. Panorama’s value proposition is helping partners to operate in smarter, more impactful, and more efficient ways.

Panorama’s values are built on four core principles:

• Vision:
  See the big picture and examine all angles
• Integrity:
  Maintain trust and strive for excellence
• Partnership:
  Collaborate and foster meaningful relationships
• Impact:
  Act boldly and create a ripple effect.

The Panorama Group is a community of organizations that includes:

• Panorama Global, a social impact nonprofit that empowers changemakers through radical collaboration,
• Panorama Strategy, a social purpose consultancy that accelerates progress for partners through audacious thinking, and
• Panorama Action, which mobilizes voices and resources through bold action.

The Enterprise Risk Manager is responsible for developing and maintaining the identification, tracking, mitigation, and communication of enterprise risk for Panorama Global. Key areas for the role include risk management, entity compliance, data protection, cybersecurity, record retention, insurance, and state registrations. The Enterprise Risk Manager will support strategic decision‑making by the Leadership Team and help inform organizational objectives and priorities based on collected risk assessments – presenting both opportunities and challenges.

As a member of Panorama's Operations Team, this role will work across Panorama organizations and closely with Business Strategy & Operations, Finance, Financial Planning & Analysis, Grants and Contracts and PACT (People and Culture Team.) This exempt, full‑time position reports to the Vice President, Finance.

Candidates must be based in one of Panorama’s hub cities (Seattle, Denver, Washington, DC, and New York City). For Seattle and NYC, employees are expected to work in the office four days per week starting in 2026. In Washington, DC and Denver, this requirement will go into effect once the offices are established no earlier than Q4 2026.

• Design, implement, and continuously improve the organization’s risk management framework to align with strategic objectives and regulatory requirements.
• Identify, assess, and monitor enterprise‑wide risks including financial, operational, strategic, compliance, and reputational risks.
• Develop and maintain risk registers, dashboards, and Key Risk Indicators (KRIs) to track exposure and mitigation progress.
• Assist in preparation of comprehensive risk reports to senior leadership, the Board, and Audit & Finance Committee.
• Coordinate with Associate Director, Grants & Contracts when appropriate to identify and resolve compliance and risk issues presented by agreements (including but not limited to permissible 501(c)(3) charitable activities, lobbying/political activity, fundraising, funding from governmental entities, and high‑risk activities potentially impacting corporate insurance coverages.)
• Support development, implementation, and maintenance of enterprise trademark strategy.

• Oversee organizational policies in data protection, cybersecurity, internal controls, record retention, urgent matters response and more.
• Coordinate implementation of record retention and destruction practices across teams, including schedule tracking and routine clean‑ups.
• Manage international entity governance and compliance under the direction of VP, Finance.
• Administer enterprise insurance programs, state registrations and charitable registrations, including serving as primary point of contact and maintaining organizational compliance calendars.

• Conduct first‑level legal reviews and collaborate with external legal counsel and internal teams on key risk and compliance matters.
• Act as point of contact for data protection inquiries and GDPR compliance; ensure…