Manager, Enterprise Risk & Compliance

About The WCEBP

With origins dating back more than 100 years, The Winnipeg Civic Employees’ Benefits Program is comprised of a multi-employer pension plan with defined benefit components, and a long term disability plan. The City of Winnipeg and eight other employers participate in the Program . WCEBP also provides day to day administration services to the Winnipeg Police Pension Plan . Combined, WCEBP provides administration services to over 22,000 active and retired members and manages approximately $10 billion in assets. The WCEBP is committed to integrity, service excellence, and operating in the best interest of our Members. Our Vision is to be considered by Members and industry peers as one of the best managed pension plan organizations in Canada.

The Position

The Manager, Enterprise Risk & Compliance is responsible for establishing, leading and continuously advancing Enterprise Risk Management (ERM), compliance management, and internal control processes at The Winnipeg Civic Employees' Benefits Program (WCEBP). Reporting to the Chief Financial Officer, you will lead the development and advancement of WCEBP’s Enterprise Risk Management (ERM), compliance and internal control frameworks. This role serves as the organization's central resource for enterprise risk, compliance and internal controls, supporting WCEBP in proactively identifying, assessing, managing, monitoring and reporting risks across the organization.

The position is accountable for developing and maintaining WCEBP's ERM framework, enterprise risk register, risk assessment methodology, compliance management framework, and risk reporting framework. The role works collaboratively with Executive Leadership, management, the Audit Committee, and the Boards to embed a risk-aware and compliance-focused culture and ensure risk oversight is aligned with WCEBP's strategic objectives, fiduciary responsibilities, and regulatory obligations.

The Manager, Enterprise Risk & Compliance leads enterprise compliance initiatives, regulatory monitoring, internal control oversight, and operational resilience planning. This includes responsibility for facilitating enterprise-wide risk assessments, monitoring emerging risks, assessing compliance obligations, coordinating control reviews and assurance activities, and providing meaningful reporting and insights to Executive Leadership, and governance bodies. The position provides strategic advice and practical guidance across the organization on risk, compliance, and internal control matters while supporting continuous improvement in organizational effectiveness, accountability, and decision-making.

Key Duties & Responsibilities

Enterprise Risk Management:

• Lead the development, implementation and continuous improvement of WCEBP’s Enterprise Risk Management (ERM) framework.
• Develop and maintain the enterprise risk register, risk assessment methodology, risk appetite and tolerance measures, key risk indicators and enterprise risk reporting.
• Facilitate enterprise-wide risk assessments and work with risk owners to identify, assess, monitor and mitigate strategic, operational, financial, regulatory, technology and emerging risks.

Compliance & Internal Controls:

• Develop and maintain WCEBP’s compliance management and internal control frameworks.
• Monitor regulatory and industry developments, assess organizational impacts and support effective policies, controls and compliance practices.
• Coordinate compliance assessments, control reviews and assurance activities, including the monitoring and resolution of identified gaps.

Operational Resilience & Third-Party Risk:

• Lead business continuity, operational resilience and incident management planning, including testing and continuous improvement.
• Develop and maintain risk management practices for critical vendors, service providers and outsourced partners.

Risk Reporting & Advisory:

• Provide meaningful risk and compliance reporting, dashboards and recommendations to Executive Leadership, the Audit Committee and Boards.
• Provide strategic advice and practical guidance across the organization and help embed a strong, risk-aware and compliance-focused culture.

Qualifications & Technical Competencies

• Bachelor’s degree in Accounting, Commerce, Business Administration, Finance, Risk Management, Public Administration or a related discipline.
• Professional risk management designation or certification such as CRM, CRMP or an equivalent risk management designation.
• Minimum six (6) years of progressive experience in enterprise risk management, compliance, internal audit, internal controls, operational risk, regulatory compliance or a related advisory function.
• Demonstrated experience developing, implementing or maturing enterprise-wide risk, compliance or internal control frameworks.
• Strong knowledge of ERM principles and frameworks, risk assessment methodologies, risk appetite and tolerance, key risk indicators, compliance management and internal controls.
• Strong communication and relationship-building skills, with the ability to advise senior leadership and prepare clear executive, Committee and Board-level reporting.
• Experience within pension administration, financial services, insurance, the public sector or another regulated/fiduciary environment is preferred.
• CPA, CISA, CIA, CRMA or related professional designations are considered strong assets.
• Knowledge of pension-sector fiduciary oversight and applicable pension regulatory requirements is considered an asset.

How to Apply

Please submit your cover letter and resume outlining your qualifications to Suzanne Buckley via email: sbuckley@winnipeg.ca by October 12, 2026.