Director of Internal Controls and Risk Management

Korn Ferry has partnered with our client for the role, Director, Risk Management & Internal Controls.

The Director, Risk Management & Internal Controls is responsible for leading the organization's internal control and enterprise risk management programs. This role oversees Sarbanes-Oxley (SOX) 404 compliance, Model Audit Rule (MAR) compliance, Own Risk and Solvency Assessment (ORSA) reporting, and enterprise risk management (ERM) activities. The Director, Risk Management & Internal Controls will partner with executive leadership, business stakeholders, and external auditors to strengthen the control environment, identify emerging risks, and ensure compliance with regulatory requirements while supporting the company's strategic objectives.

Responsibilities & Qualifications

Internal Controls, SOX & Regulatory Compliance

• Lead the design, execution, and continuous improvement of the Company's SOX 404 and Model Audit Rule compliance programs.
• Oversee end-to-end documentation, testing, evidence collection, and assessment of internal controls over financial reporting.
• Partner with external auditors to support audit activities and ensure efficient execution of audit procedures.
• Monitor and drive remediation efforts for identified control deficiencies and provide recommendations for process improvements.
• Support the integration of new accounting standards, business initiatives, and significant transactions into the control environment.

Enterprise Risk Management

• Manage and enhance the Company's enterprise risk management framework, policies, and governance processes.
• Facilitate risk identification, assessment, monitoring, and reporting activities across the organization.
• Develop and present risk dashboards, scorecards, and reports to executive leadership and governance committees.

• Partner with first-line and second-line risk functions to strengthen operational and financial controls.
• Collaborate with Information Technology teams to ensure appropriate risk and control considerations are incorporated into strategic technology initiatives and change management activities.

Risk Governance & Regulatory Reporting

• Lead enterprise risk reporting to regulatory agencies, rating agencies, and other external stakeholders.
• Oversee preparation and submission of ORSA filings, Enterprise Risk Reports, and other required regulatory submissions.
• Develop and monitor key risk indicators (KRIs), risk tolerance metrics, and risk appetite measures.
• Evaluate emerging risks and provide recommendations to executive leadership regarding mitigation strategies.
• Coordinate quarterly Business Risk and Controls Committee meetings and support overall risk governance activities.

Leadership

• Provide leadership, coaching, and development for assigned team members.
• Foster a culture of accountability, transparency, and continuous improvement.
• Build collaborative relationships across business functions and influence risk-aware decision making throughout the organization.

Required Qualifications

Education

• Bachelor's degree in Accounting, Finance, Risk Management, Business Administration, or a related field.
• Master's degree preferred.

Experience

• 10 years of progressive experience in risk management, internal controls, audit, accounting, or financial governance.
• Experience leading SOX 404 compliance and internal control assessments.
• Demonstrated experience developing and managing enterprise risk management programs.
• Experience presenting complex risk and control matters to senior executives and governance committees.
• Strong project management and cross-functional leadership experience.

Certifications

• Certified Public Accountant (CPA) required.
• CIA, CISA, or other relevant professional certifications preferred.

Compensation: $150,000 - $180,000 salary plus 30% variable compensation

SE: 510821604