Director, Procurement Risk, Audit and Compliance
About The Position
The Director, Risk, Audit & Compliance Strategy strengthens procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The role deploys strategies across the Risk & Compliance teams and leads and coaches the team, supporting professional development aligned with organizational goals. It calls for a robust enterprise risk-management background, including experience across areas such as IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal. The Director leads enterprise procurement risk, audit, and compliance strategy; establishes risk-management frameworks and risk-based audit programs; and ensures adherence to applicable laws, regulations, policies, ethical sourcing requirements, delegated authorities, and contractual obligations. The position also advances the PRAC 2026–2028 capability roadmap and integrates AI tools and monitoring to automate and optimize risk, audit, and compliance functions. The role oversees supplier and third-party risk, leads investigations and remediation, develops policies and training, and reports on risks, findings, and control effectiveness.
Requirements
- Bachelor’s degree in business, supply chain, finance, accounting, law, risk management, or a related field.
- 10+ years of progressive experience in procurement, enterprise risk management, audit, compliance, internal controls, or related disciplines, including leadership experience.
- Demonstrated experience designing and implementing risk-based compliance and audit strategies in a complex, regulated, or global organization.
- Strong knowledge of procurement lifecycle controls, strategic sourcing, contracting, supplier management, third-party risk, and purchase-to-pay processes.
- Broad enterprise risk-management experience spanning IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.
- Knowledge of relevant compliance, governance, and control frameworks.
Nice To Haves
- Advanced degree.
- CPA, CIA, CISA, CRMP, CCEP, or equivalent certification.
Responsibilities
- Lead enterprise procurement risk, audit, and compliance strategy, translating priorities into governance, controls, and assurance plans.
- Establish a procurement risk-management framework for identification, assessment, mitigation, monitoring, escalation, and reporting.
- Lead integration of AI tools, including AI Risk Intelligence, predictive models, monitoring agents, and Copilot-enabled insights, into risk and compliance functions.
- Drive the PRAC 2026–2028 capability roadmap toward more anticipatory risk management, automated and optimized audit, and predictive and preventive compliance.
- Implement continuous AI-led monitoring to move compliance controls from detective to preventive and enable early identification of compliance weaknesses.
- Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, and support dynamic prioritization and proactive crisis response using real-time data and predictive analytics.
- Design and oversee a risk-based audit program covering procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls; track corrective actions through closure.
- Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations.
- Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls.
- Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations.
- Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness.
- Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings.
- Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices.
- Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals.
Benefits
- Paid time off, including vacation, holidays, and sick leave.
- Medical, dental, and vision insurance for eligible employees.
- 401(k) for eligible employees.
- Eligible to participate in long-term incentive programs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
