Director Risk and Controls

Solidigm•San Jose, CA

1d•$159,520 - $255,300

About The Position

We are seeking an individual to lead our Risk and Controls function. The director, risk and controls own the Company’s global internal control framework and SOX program management as the second line of defense, partnering closely with Internal Audit, which independently assesses the effectiveness of governance, risk management, and internal controls as the third line of defense. This role serves as a key partner to Finance, IT, Legal, Internal Audit, and operational leadership to ensure a robust, scalable, and audit-ready control environment that supports financial reporting integrity, regulatory compliance, and operational excellence. This role requires deep expertise in SOX 404 compliance, process-level controls, ITACs, and risk governance, as well as strong experience operating in a high-growth, global manufacturing and technology environment. The director, risk and controls will report to our Chief Accounting Officer.

Requirements

Bachelor’s degree in accounting or finance, CPA or Chartered Accountancy required
12–15+ years of experience in public accounting (Big 4 preferred) and/or industry
5–8+ years in a leadership role overseeing SOX and risk programs
Deep knowledge of SOX 404 (ICFR) requirements for large, accelerated filers
Deep knowledge of US GAAP, including complex areas such as ASC 606 and inventory accounting
Deep knowledge of IT automated controls
Experience interacting with External Auditors and Internal Audit functions
Strong understanding of risks in a global manufacturing or semiconductor environment

Nice To Haves

Experience in the semiconductor industry
Exposure to global operations across Asia and U.S.
Experience with controls in ERP systems (SAP S/4HANA strongly preferred)
Familiarity with COSO framework, COBIT, and NIST cybersecurity frameworks
Experience with tools such as Workiva

Responsibilities

Lead the design, implementation, and continuous improvement of the Company’s SOX compliance program, including annual scoping, management risk assessment, control design standards, and remediation governance.
Own management-level business process controls (e.g., revenue recognition, inventory, procurement, close & consolidation) as the second line of defense; partner with the IT organization on Business Automatic Controls (ITAC) in design and remediation.
Ensure controls are appropriately designed, including: Inventory and cost accounting (standard costing, yield, obsolescence), Revenue recognition under ASC 606 (distributor, incentives and rebates), Capital expenditures and fixed assets (fab equipment), Financial reporting and accounting close, Procure-to-pay process, Entity-level controls
Drive remediation of control deficiencies, including root cause analysis and sustainable corrective action plans
Serve as management’s primary liaison with control design, control documentation, and remediation activities. Coordinate with Internal Audit to support audit reliance while maintaining Internal Audit’s independence.
Partner with Finance Transformation, IT, and business leaders to standardize key financial and operational processes globally, embed controls into system workflows (e.g., SAP, EPM), and drive adoption of control automation, analytics, and continuous monitoring tools.
Reduce reliance on manual controls and improve control efficiency.
Partner with the IT organization on key application controls across ERP and reporting platforms, including SOX-relevant considerations for segregation of duties.
Ensure control readiness for major system implementations and upgrades.
Provide management updates to executive leadership regarding SOX compliance, key risks, and remediation progress. Support management presentations related to SOX program execution, while Internal Audit independently reports its assurance activities and assessment results.
Maintain strong governance over policies, procedures, and control documentation.
Ensure alignment with SEC reporting requirements and disclosure controls.
Partner with Internal Audit to facilitate independent assurance activities while preserving Internal Audit’s organizational and functional independence.
Coordinate annual SOX planning, management testing schedules, and remediation activities with Internal Audit.
Support Internal Audit’s evaluation of management’s internal control framework through timely access to documentation, evidence, and remediation updates.
Maintain clear separation between management’s ownership of internal controls and Internal Audit’s independent assessment responsibilities.
Build and lead the Risk & Controls organization responsible for SOX program management, control governance, risk monitoring, and management testing.
Serve as a trusted advisor to finance, operations, legal, and IT leadership.
Foster a culture of accountability, risk awareness, and continuous improvement.