Dir, Risk Internal Controls and Operations

PDS Health•Irvine, CA

2d•$169,000 - $227,000

About The Position

The Director of Risk, Internal Controls & Risk Operations is responsible for designing and implementing the organization's internal control infrastructure, policy framework, and operational risk processes. This role will build and scale structured internal controls, risk documentation, and policy governance to support the organization's continued growth and operational discipline. The Director will partner closely with Finance, Accounting, Compliance, Legal, IT, and operational leaders to build a sustainable control environment, including development and ownership of the organization's Risk and Control Matrix (RCM). The role will also lead the evaluation and implementation of a Governance, Risk, and Compliance (GRC) platform aligned with the organization's technology architecture. Success in this role requires strong collaboration and influence across the organization. The Director must be viewed as a trusted partner to operational leaders, working collaboratively to design controls and policies that strengthen governance while remaining practical and effective for a high-growth environment. This role operates within a privately held, high-growth organization without a traditional audit committee or independent board structure, requiring strong judgment, ownership, and the ability to establish practical governance structures in partnership with executive leadership. In addition, this position oversees enterprise processes related to business licenses and permits, managing approximately 21,000 annual filings, with a focus on automation, process improvement, and scalable solutions. The internal control and risk infrastructure developed through this role should be guided by the following principles: Scalable for a high-growth organization – Controls and processes should support the organization's continued expansion and evolving operational complexity. Technology-enabled wherever possible – Solutions should leverage automation, system integration, and emerging technologies, including AI-enabled tools, to improve efficiency and accuracy. Integrated with enterprise risk management – Internal controls and policies should align with the organization's broader Enterprise Risk Management framework to ensure consistent identification, documentation, and mitigation of key risks. Operational partnership – Controls and policies should be developed in partnership with operational leaders to ensure they are practical, understood, and consistently applied across the organization.

Requirements

Bachelor’s Degree in Arts/Sciences (BA/BS) from an accredited college or university.
10+ years of progressive experience in internal controls, internal audit, risk management, accounting, compliance, or related governance functions.
CPA (active or inactive)
6+ years of leadership experience.
Demonstrated experience designing and managing Risk and Control Matrices (RCM) and structured internal control frameworks.
Experience developing, writing, or governing enterprise policies and policy management frameworks.
Experience implementing enterprise internal control environments within complex organizations.
Experience leading cross-functional process improvement initiatives.
Experience designing practical, scalable control frameworks within high-growth or evolving organizations, balancing strong governance with operational efficiency.
Experience leading or significantly contributing to the implementation of governance, risk, or compliance technology platforms.
Internal control framework design
Risk & Control Matrix (RCM) ownership
Policy lifecycle management
Data analytics and AI-enabled risk identification techniques
Governance, risk, and compliance technology
Process improvement and operational scalability
Influence and partnership leadership – ability to build credibility and strong working relationships with operational leaders and drive adoption of control practices through collaboration rather than directive authority
Cross-functional leadership and stakeholder alignment
Structured analytical thinking and problem solving
Executive communication

Nice To Haves

Certified Public Accountant (CPA) or
Certified Internal Auditor (CIA) or
Certified Information Systems Auditor (CISA) or
Certified Risk Management Assurance (CRMA) or
Experience in a multi-location or high-growth organization.
Experience implementing governance or internal control frameworks in complex operational environments.

Responsibilities

Design and implement a structured internal control framework supporting key financial and operational processes across the organization.
Develop and maintain the organization’s Risk and Control Matrix (RCM), including risks, controls, and ownership.
Establish standardized methodologies for process documentation, risk assessment, and control design.
Evaluate control effectiveness and drive continuous improvement across the control environment.
Establish and maintain an enterprise policy framework, including ownership, approval processes, and lifecycle management.
Develop and maintain a centralized policy inventory and governance structure.
Lead the evaluation and implementation of a Governance, Risk, and Compliance (GRC) platform aligned with enterprise systems and technology architecture.
Define system requirements, workflows, and reporting to support internal controls, policy management, and enterprise risk processes.
Drive adoption of technology-enabled solutions to improve risk visibility, documentation, and reporting.
Leverage data analytics and AI-enabled tools to identify trends, anomalies, and control gaps, enhancing risk identification and monitoring capabilities.
Oversee business licenses and permits processes, ensuring accuracy, compliance, and timely completion across approximately 21,000 annual filings.
Identify and implement automation opportunities to improve efficiency, scalability, and process consistency.
Support the Enterprise Risk Management (ERM) program, including maintaining the risk register and aligning it with the Risk and Control Matrix.
Develop reporting and insights to support executive leadership decision-making and risk visibility.
Provide guidance to business leaders on internal controls, policy development, and risk management practices.
Ensures compliance with all policies and standards, as well as state, federal and other regulatory bodies.