Vice President, Enterprise Risk & Compliance

FHI 360 • US-REMOTE-DC, DC

2d • $185,000 - $215,000

About The Position

The Vice President, Enterprise Risk & Compliance provides enterprise leadership for FHI 360's enterprise risk management and second-line compliance functions. The role establishes and maintains an integrated, risk-based framework to identify, assess, monitor, communicate and respond to significant enterprise and compliance risks in a complex global environment and evolving funding landscape. The Vice President works closely with the Office of General Counsel, Finance, Business Development, Programs, Human Resources, Procurement, Safeguarding, country and regional leadership, and other functions, while maintaining clear accountability across the three lines model.

The position leads the enterprise risk management framework, maintains the risk universe and focuses executive attention on approximately 10–12 top enterprise risks. It partners with risk owners on responses, indicators, mitigation plans and reporting, monitors emerging risks, and provides decision-useful information to executives and, as appropriate, the Board and its committees.

The Vice President establishes the second-line compliance risk management and monitoring framework, maintains an inventory of material compliance obligations, leads periodic risk assessments and executes an annual risk-based Compliance Monitoring Plan distinct from the Internal Audit Plan. The role coordinates monitoring, identifies systemic or emerging issues, challenges corrective actions and tracks remediation.

The role also develops a framework to assess material or non-standard funding opportunities and mechanisms. In coordination with relevant functions, it evaluates risks involving donor requirements, fixed-price and Fixed Amount Awards, low indirect cost recovery, payment structures, cost recovery, partners and subrecipients, and portfolio-level exposure. It provides independent second-line coordination, monitoring and challenge without assuming the decision-making responsibilities of management or other functions.

The Vice President turns monitoring results and emerging developments into appropriate organizational action, coordinates with legal and functional experts on interpretation, training and communications, and tracks corrective actions through completion. The role promotes compliance as a management responsibility, advises senior leadership, and influences across organizational boundaries while providing constructive challenge and focusing attention on material risks.

FHI 360 offers a competitive benefits package, professional development, and policies and programs supporting work/life balance. For US-based full-time staff, the organization contributes 7% of monthly base pay to a money purchase pension plan and provides 18 days of paid vacation, 12 sick days and 11 holidays per year. The expected US-based annual salary range is $185,000–$215,000; international hiring ranges vary by location.

Requirements

• Bachelor's degree in business, finance, law, accounting, international development, risk management or a related field.
• Significant senior-level experience in enterprise risk management, compliance, donor/funder compliance, governance or a related discipline.
• Demonstrated experience designing or leading enterprise risk and/or compliance programs in a complex, decentralized organization.
• Strong understanding of risk-based compliance monitoring and the respective roles of management, legal/compliance and Internal Audit within a three lines model.
• Understanding of different funding mechanisms, including cost-reimbursement, fixed-price, milestone-based and Fixed Amount Award structures.
• Demonstrated ability to evaluate financial, compliance, operational and reputational risks associated with new funding arrangements and partnerships.
• Experience working with senior executives and presenting complex risk matters to executive leadership and/or Board committees.
• Strong analytical judgment and ability to prioritize a broad risk universe into a focused set of material enterprise risks.
• Demonstrated ability to influence across functions and geographies without direct authority.
• Excellent written, verbal, facilitation and executive communication skills.

Nice To Haves

• Advanced degree.
• Experience with U.S. Government-funded programs and applicable compliance frameworks.
• Experience in international development, humanitarian, nonprofit or similarly complex global operating environments.
• Experience in U.S. Government and institutional donor compliance; enterprise risk management; subrecipient and partner risk; sanctions and third-party due diligence; anti-bribery and anti-corruption; conflicts of interest; regulatory compliance; funding diversification; cost recovery; fixed-price and performance-based awards; compliance monitoring; investigations; safeguarding; or international operations.

Responsibilities

• Lead and continuously strengthen the enterprise risk management framework and communicate significant risks to senior leadership.
• Maintain the enterprise risk universe and facilitate prioritization of approximately 10–12 top enterprise risks for executive attention.
• Partner with executive and functional risk owners to establish risk responses, key risk indicators, mitigation plans, escalation thresholds and reporting.
• Monitor changes in the risk profile and identify emerging risks arising from funding, operating environments, regulations, technology, partnerships and organizational strategy.
• Develop decision-useful enterprise risk reporting for executive leadership and, as appropriate, the Board and its committees.
• Establish and maintain the second-line compliance risk management and monitoring framework.
• Maintain a risk-based inventory of material compliance obligations, including donor and funder requirements, U.S. Government requirements, sanctions, anti-bribery and anti-corruption, conflicts of interest, privacy and data protection, safeguarding-related requirements and other significant regulatory obligations.
• Lead periodic compliance risk assessments and develop and execute an annual risk-based Compliance Monitoring Plan separate from the Internal Audit Plan.
• Conduct or coordinate second-line monitoring of key compliance controls and implementation of significant requirements.
• Identify systemic and emerging compliance issues, constructively challenge management on corrective actions, and track and escalate remediation of significant issues.
• Develop a risk-based framework for assessing material or non-standard new funding opportunities and funding mechanisms.
• Coordinate structured risk assessments with Business Development, OGC, Finance, Programs and other relevant functions before acceptance of material new funding arrangements.
• Help management understand risks associated with donor requirements, fixed-price instruments, Fixed Amount Awards, low indirect-cost-recovery arrangements, milestone and performance-based payments, cost recovery, new funding mechanisms, partners and subrecipients, and cumulative portfolio exposures.
• Develop portfolio-level risk indicators covering funding concentration, fixed-price exposure, low-ICR funding, cost recovery, milestone/payment exposure and other material funding risks.
• Translate monitoring results and emerging risks or regulatory and donor developments into appropriate organizational action.
• Work with departments and subject-matter experts to determine and implement appropriate training, communications, policy, procedure, job aid, system, control or other corrective measures.
• Ensure owners are assigned to significant compliance actions, monitor implementation through completion, assess effectiveness and escalate persistent or systemic issues.
• Coordinate with OGC on legal and regulatory interpretation and with functional leaders on technical training and communications.
• Promote a culture in which compliance is understood as a management responsibility.
• Advise senior leadership, build partnerships across functions, provide constructive challenge and translate complex risk matters into practical business decisions.
• Reinforce accountability across management and business functions, OGC, Enterprise Risk & Compliance, Internal Audit, executive leadership and the Board/Audit Committee.

Benefits

• 7% of monthly base pay contributed to a money purchase pension plan account for US-based staff.
• 18 days of paid vacation per year for US-based full-time staff.
• 12 sick days per year for US-based full-time staff.
• 11 holidays per year for US-based full-time staff.
• Competitive benefits package.
• Professional development.
• Policies and programs that support a healthy work/life balance.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive