Senior Manager, GBS - Risk Intelligence

The Kraft Heinz Company•Chicago, IL

1d•Hybrid

About The Position

The Senior Manager, GBS Risk Intelligence is a high-impact leadership role responsible for the design, integrity, and continuous improvement of the GBS control environment. Reporting directly to the Global Process Leader, Account to Report (ATR), you will serve as a key liaison between the function, internal controls and internal audit to establish the GBS-wide controls governance and risk intelligence framework. The work will include cross-functionally leading priorities across all current Global Business Services (GBS)—including Account to Report, Commercial Services, Data Management, Financial Planning & Analysis, People Business Services, Procure to Pay, Order to Cash, Source to Pay, Supply Chain Management, Trade to Cash—as well as future service lines integrated into our global model. Working directly with GBS tower leads and with matrixed support from two ATR-aligned resources based in India (QA / Internal Controls / Projects profiles), you will establish control-by-design standards, drive global controls governance, and deliver actionable risk intelligence. Your mission is to build a “Pre-Internal Control” framework (control-by-design / preventive controls) that reduces recurring issues by addressing root causes—and supports audit-ready processes as we scale.

Requirements

Bachelor’s degree in Finance, Accounting, or Business Administration required.
Minimum 8 years of experience in Controllership, Finance, GBS, Internal Controls, and/or Internal Audit within a complex global organization.
Proven ability to influence transformation leads and cross-functional leadership to ensure control-by-design and risk requirements are prioritized early in project lifecycles.
Proven ability to design governance frameworks for established processes and “greenfield” service migrations.
High proficiency with ERP environments (e.g., SAP), GRC tools, BlackLine, and data visualization (Power BI/Tableau).
Strong presence and communication skills, capable of aligning regional leaders, site leaders, and auditors under clear governance and shared outcomes.

Nice To Haves

Professional Certification (CPA, CIA, or CA) is highly preferred.
Knowledge of SOX/ICFR, COSO, SOC 1, and SOC 2 is an asset.
Experience with AI-driven automation (e.g., workflow automation, anomaly detection, continuous monitoring) is a plus.
Ability to translate risk and audit observations into practical process improvements that reduce manual error risk, system/process breakdowns, and operational rework.

Responsibilities

Partner with cross-functional transformation teams (Tower Leads, IT, GBS Transformation, Internal Audit and Internal Controls) to ensure robust controls are established as a foundational part of any new process assessment, migration, or technology rollout.
Embed clear ownership, practical evidence expectations, and sustainability into process designs to support consistent execution across regions (with flexibility for local/regulatory overlays).
Shift from manual and detective oversight toward automated and preventive workflows where feasible.
Digitize control of ownership and execution requirements to support continuity through organizational and operating model changes.
Serve as the central point of coordination for Internal and External Audit across GBS, partnering with tower and site leaders to align messaging, evidence, and action plans (while keeping process ownership with the towers/sites).
Lead the “Post-Internal Audit” approach (remediation governance and sustainability monitoring): drive timely remediation to agreed target dates, validate completion readiness, and monitor for sustained performance.
Coordinate cross-tower action plans, clarify evidence needs, and track risk themes, remediation progress, and recurring patterns for leadership visibility.
Analyze deficiency trends to identify systemic “Risk Signals” and recurring breakdown points across the GBS operating model.
Lead deep-dive Root Cause Analysis (RCA) to reduce manual touchpoints, rework, and control execution friction through process engineering, standardization, and automation (where appropriate).
Standardize RACM composition (controls taxonomy, required attributes, and governance expectations) across regions where GBS operates, establishing minimum standards with defined local/regional overlays.
Define the control “blueprint” for future GBS expansions and geographic migrations, including minimum control expectations and implementation guardrails.
Establish forums, standards, and escalation paths to drive alignment and timely decision-making while respecting regional/site operational requirements.
Define and implement the Continuous Maturity Model (“CMM”) framework to assess process maturity across all GBS towers.
Build and maintain timely/near real-time visibility tools (where feasible) (e.g., continuous monitoring dashboards) for priority controls and key risk indicators.
Monitor control performance and risk indicators across the GBS control portfolio (300+ controls), prioritizing attention and support to the highest-risk areas.
Increase early identification of issues through operational self-validation tools, defined “pulse check” cycles, and targeted deep-dives (risk-based internal QA) designed to enable towers/sites—not duplicate ownership.
Reduce repeat findings and improve remediation timeliness through sustained governance, targeted prevention initiatives, and trend-based prioritization.
Partner with IT and BCP teams to ensure our control framework is “crisis-proof”.
Lead the coordination of control reviews during crisis responses and manage the end-to-end incident feedback loop to mitigate future risks.
Establish and oversee global governance standards for sensitive processes and delivering cross-tower financial checkpoints.
Own the risk assessment lifecycle for our GBS vendors and outsourcing partners.
Perform initial due diligence during transitions to periodic Business as Usual (“BAU”) reviews, you ensure our partners meet the same rigorous control standards as our internal teams.