Director, Internal Audit & Enterprise Risk Management

Director, Internal Audit & Enterprise Risk Management Responsibilities

Reports To:

Chief Financial Officer with dotted-line accountability to the Audit Committee of the Board of Directors

The Director of Internal Audit & Enterprise Risk Management is a key leadership role responsible for building and leading a modern, risk-based Internal Audit function while advancing the company’s enterprise risk management (ERM) capabilities. This leader will serve as a trusted advisor to the CFO, executive leadership team, and Audit Committee, providing independent insights that strengthen governance, mitigate risk, and enhance overall business performance.

This role requires a strategic mindset, strong technical expertise, and exceptional leadership capabilities to influence the organization and drive continuous improvement in audit quality, risk processes, compliance, and control environments.

• Lead audits across financial, operational, compliance, and IT domains with a focus on value creation.
• Ensure adherence to professional audit standards (IIA, SOX) while maintaining independence.
• Provide concise, actionable recommendations to leadership, the Board, and the Audit Committee.
• Ensure timely and sustainable resolution of audit risk findings.
• Lead special reviews and investigations including ethics and compliance-related matters.
• Leverage data analytics and technology to enhance audit effectiveness.
• Build a modern, insight-driven audit function that transitions internal audit from primarily compliance-focused to risk-prioritized and value-oriented.

• Lead and evolve the enterprise risk management framework, including risk identification, assessment, mitigation, and monitoring.
• Advance Enterprise Risk Management maturity and strengthen controls with creating bureaucracy.
• Implement a practical, scalable ERM framework embedded in business decision-making.
• Integrate risk considerations into strategic planning and capital allocation.
• Drive ongoing enhancement of risk processes and governance practices.
• Oversee key risk programs, including third party risk management for indirect spending.

• Establish a flexible, data-enabled audit plan aligned to enterprise priorities.
• Enhance internal control effectiveness across financial, operational, and technology areas.
• Build discipline around issue tracking, ownership, and remediation.
• Strengthen internal control frameworks and audit readiness.
• Partner cross-functionally with Finance, Legal, Operations, and IT to ensure effective governance and policy adherence.
• Coordinate with external auditors.
• Drive continuous improvement of policies, procedures, and control effectiveness.

• Think strategically and connect audit and risk insights to broader business objectives.
• Deliver clear, actionable insights that drive decision-making – not just findings.
• Apply strong business acumen and judgment in decision-making.
• Drive execution with discipline and accountability.
• Balance rigor with a pragmatic, business-oriented approach.
• Build and develop a high-performing team while strengthening talent, capability, and succession within audit and risk.
• Build credibility and inspire trust across all levels of the organization, including executive leadership, the audit committee, and the Board.
• Promote a culture of integrity, engagement, accountability, continuous improvement, and ethical conduct.
• Champion innovation and continuous improvement while demonstrating agility and responsiveness to emerging risks.
• Lead courageously, providing independent perspectives even when challenged.
• Partner with business leaders to embed risk awareness into decision making.

• Bachelor’s degree in Accounting , Finance, or related field; MBA or advanced degree preferred.
• 10+ years of progressive experience in internal audit, public accounting, and/or risk management.
• Professional certifications such as CPA, CIA, or CISA preferred.
• Proven leadership experience building and leading high-performing teams.
• Deep knowledge of internal controls and governance frameworks.
• Experience presenting to executive leadership and Boards.