Director, Internal Audit & Enterprise Risk Management

Director, Internal Audit & Enterprise Risk Management

Responsibilities

Reports To: Chief Financial Officer with dotted-line accountability to the Audit Committee of the Board of Directors

The Director of Internal Audit & Enterprise Risk Management is a key leadership role responsible for building and leading a modern, risk-based Internal Audit function while advancing the company’s enterprise risk management (ERM) capabilities. This leader will serve as a trusted advisor to the CFO, executive leadership team, and Audit Committee, providing independent insights that strengthen governance, mitigate risk, and enhance overall business performance.

This role requires a strategic mindset, strong technical expertise, and exceptional leadership capabilities to influence the organization and drive continuous improvement in audit quality, risk processes, compliance, and control environments.

Key Responsibilities

Internal Audit Leadership

• Lead audits across financial, operational, compliance, and IT domains with a focus on value creation.
• Ensure adherence to professional audit standards (IIA, SOX) while maintaining independence.
• Provide concise, actionable recommendations to leadership, the Board, and the Audit Committee.
• Ensure timely and sustainable resolution of audit risk findings.
• Lead special reviews and investigations including ethics and compliance-related matters.
• Leverage data analytics and technology to enhance audit effectiveness.
• Build a modern, insight-driven audit function that transitions internal audit from primarily compliance-focused to risk-prioritized and value-oriented.

Enterprise Risk Management

• Lead and evolve the enterprise risk management framework, including risk identification, assessment, mitigation, and monitoring.
• Advance Enterprise Risk Management maturity and strengthen controls with creating bureaucracy.
• Implement a practical, scalable ERM framework embedded in business decision-making.
• Integrate risk considerations into strategic planning and capital allocation.
• Drive ongoing enhancement of risk processes and governance practices.
• Oversee key risk programs, including third party risk management for indirect spending.

Governance, Controls & Compliance

• Establish a flexible, data-enabled audit plan aligned to enterprise priorities.
• Enhance internal control effectiveness across financial, operational, and technology areas.
• Build discipline around issue tracking, ownership, and remediation.
• Strengthen internal control frameworks and audit readiness.
• Partner cross-functionally with Finance, Legal, Operations, and IT to ensure effective governance and policy adherence.
• Coordinate with external auditors.
• Drive continuous improvement of policies, procedures, and control effectiveness.

Strategic Leadership

• Think strategically and connect audit and risk insights to broader business objectives.
• Deliver clear, actionable insights that drive decision-making – not just findings.
• Apply strong business acumen and judgment in decision-making.
• Drive execution with discipline and accountability.
• Balance rigor with a pragmatic, business-oriented approach.
• Build and develop a high-performing team while strengthening talent, capability, and succession within audit and risk.
• Build credibility and inspire trust across all levels of the organization, including executive leadership, the audit committee, and the Board.
• Promote a culture of integrity, engagement, accountability, continuous improvement, and ethical conduct.
• Champion innovation and continuous improvement while demonstrating agility and responsiveness to emerging risks.
• Lead courageously, providing independent perspectives even when challenged.
• Partner with business leaders to embed risk awareness into decision making.

Qualifications

• Bachelor’s degree in Accounting , Finance, or related field; MBA or advanced degree preferred.
• 10+ years of progressive experience in internal audit, public accounting, and/or risk management.
• Professional certifications such as CPA, CIA, or CISA preferred.
• Proven leadership experience building and leading high-performing teams.
• Deep knowledge of internal controls and governance frameworks.
• Experience presenting to executive leadership and Boards.