AD, Enterprise Risk & Internal Audit

VITAMIN ANGEL ALLIANCE INC•Goleta, CA

4d•$110,000 - $140,000•Remote

About The Position

Vitamin Angels is a 501(c)3 non-profit, global public health organization working to improve nutrition worldwide. VA works directly with local organizations, including governments, to reach nutritionally vulnerable populations – pregnant women, infants, and young children – who are underserved by existing systems. Since 1994, VA has been delivering evidence-based nutrition interventions and providing technical assistance to reach more than 70 million women and children in low-resource settings annually. Vitamin Angels is an equal opportunity employer committed to fostering a workplace that values diversity, equity, inclusion, and belonging. We are a dedicated group of individuals who strive to create a supportive environment where all individuals have access to equal opportunities to succeed, regardless of background, identity, or perspective. Our efforts aim to ensure fairness and mutual respect for all employees, promoting a culture of belonging and professional growth. The Associate Director, Enterprise Risk and Internal Audit will lead Vitamin Angels’ internal audit function, providing independent and objective assurance to the Audit & Finance Committee, the Board and the Senior Leadership Team on the adequacy and effectiveness of the organization’s risk management, internal controls and compliance frameworks. The Associate Director, Enterprise Risk and Internal Audit reports to, and works closely with the General Counsel, who leads the Legal & Compliance function, in building Vitamin Angels' enterprise risk management capability and establishing the organization’s internal audit function. Neither capability exists today in a formal way. This role will build the foundation before becoming a maintenance role. It is anticipated that the first twelve months will be spent establishing frameworks, charters and practices largely from scratch, under the direction of the General Counsel and CFAO. As part of Vitamin Angels 2030 (our new three-year strategy), VA is shifting from a largely unrestricted, relationship-driven funding model toward one that includes significantly more restricted and institutional grant funding — with the compliance, reporting and control expectations that come with this. This role is a consequential hire in this transition.

Requirements

Certified Internal Auditor (CIA) designation required.
7+ years of combined experience in internal audit and enterprise risk management.
Proven ability and experience to communicate, negotiate and challenge risk and control practices at all levels of organizational hierarchy.
Strong knowledge of governance, enterprise risk management, internal controls, regulatory compliance and audit methodologies
Strong working knowledge of IIA’s International Professional Practices Framework (IPPF)and Code of Ethics.
An outcomes focus with direct experience applying risk-based internal auditing and good understanding of the Three Lines Model.
Demonstrated ability to present audit findings, recommendations and strategic insights to SLT, Audit & Finance Committee, and Boards.
Strong interpersonal skills, including influencing, negotiation, coaching and relationship building in a wide range of cultural environments. Strong ability to deliver difficult messages with tact and confidence.
Experience leading, working on and delivering multiple projects, with conflicting priorities, on a timely basis.
Self-motivated with a proven ability to work independently and with minimal supervision.
Native or professional-level English proficiency required; ability to conduct audits and draft executive summaries and present complex audit reports and risk assessments to executive management and stakeholders entirely in English.
Ability to lift, or carry, approximately 20-40 lbs. on a regular basis.
Ability to remain seated and/or stationary for extended periods of time, including but not limited to prolonged air travel, and general job assignments performed at a desk.
Must have a valid passport, necessary travel visas, government-issued identification and the ability to travel internationally.
Ability to walk or hike in conditions which may include uneven surfaces, inclinations, stairs, extreme weather, long distances, elevation changes or extremes, and/or other conditions associated with foreign travel.
Ability to receive necessary vaccines and medication for travel to certain countries.
Ability to manage stress, including but not limited to, stress resulting from local and foreign travel, large crowds, open spaces, shared office space and daily activities with reasonable accommodations.

Nice To Haves

Other relevant certifications (CPA, ACCA, CA, CISA) are a plus.
Significant experience within a nonprofit, international development, global health, humanitarian, foundation or similar mission-based organization, or the public sector.
Proven ability to design enterprise-wide frameworks, systems and processes.
Strong business acumen and the ability to quickly develop deep understanding of organizational strategy and operations.
Exceptional facilitation, communication, and stakeholder influence skills, with the ability to drive alignment across all levels.
Ability to navigate ambiguity, create structure and drive results in evolving environments.
Working fluency in technology and cybersecurity risks.
Experience with large institutional donors.
An understanding of the grant requirements of major institutional donors and humanitarian donor regulations.
Experience working in multi-cultural environments.

Responsibilities

Establish Vitamin Angels' baseline enterprise risk framework: identify, assess and prioritize top enterprise risks across financial, operational, programmatic, compliance and technology domains, with a named owner for each.
Build and maintain a living risk register, refreshed on a regular cadence, tracking risk status, mitigation plans and ownership.
Establish a regular risk reporting cadence for the Senior Leadership Team (SLT) and the Board, including at least an annual enterprise risk review.
Facilitate cross-functional risk identification and assessment for the various VA entities and headquarter functions, including country offices, operations and programs.
Support scenario planning and contingency planning led by the CFAO and SLT, bringing a structured risk lens to major decisions.
Collaborate with the General Counsel and Finance to establish the internal audit function, design the internal control framework across financial, operational, compliance and governance processes, and secure approval from the Board's Audit and Finance Committee.
Develop Vitamin Angels' risk-based internal audit plan, prioritized by exposure and likelihood.
Conduct or coordinate internal audits across financial, operational, compliance and governance areas, with initial focus informed by known control gaps, including international cash management, consultant and vendor access controls, grants compliance readiness, and country operations and programs.
Track remediation of audit findings and control exceptions to closure and report status transparently to leadership and the Audit and Finance Committee.
Coordinate with Vitamin Angels' external auditors to ensure internal and external audit work is complementary and non-duplicative.
Actively support the GC and CFAO in playing an influencing role in strengthening the organization’s control environment and broadening the understanding of risk, controls, oversight and accountability in the organization.
Partner with the Director of Technology on cybersecurity risk governance, including establishing the formal risk reporting cadence the organization's technology program currently lacks.
Partner with General Counsel and the Compliance team on operating policies as monitored controls, including exception identification and resolution.
Serve as the accountable owner for the Risk, Compliance and Assurance results.
Partner closely with the General Counsel and CFAO to ensure enterprise risk and audit findings inform the pace and sequencing of the Operations Pathway.
Provide periodic risk and audit updates directly to the General Counsel and CFAO.
The duties and responsibilities set out above are not exhaustive and the role holder may be required to carry out additional duties within reasonableness of their level of skills and experience.