Vice President, Head of Audit & Risk Management

Gilead Sciences•Foster City, CA

2d•Onsite

About The Position

Gilead is seeking an executive to lead its global Internal Audit, enterprise risk management, and business continuity functions. Reporting administratively to the Chief Financial Officer, with direct access to the Audit Committee of the Board of Directors, this role provides independent and objective assurance over governance, risk management, internal controls, and business processes. The leader will advise the Audit Committee, CEO, CFO, and senior leadership on significant and emerging risks and help incorporate risk considerations into enterprise decisions. The role leads a risk-based audit strategy across Gilead’s global operations and risk landscape, including financial, operational, commercial, compliance, technology, cybersecurity, supply chain, and manufacturing risks. It also leads enterprise risk management and governance, offering an integrated, forward-looking view of principal and emerging risks. The executive will modernize audit and risk management by advancing the use of technology, data analytics, automation, and AI, while maintaining Internal Audit’s independence and building constructive relationships across the organization. The position leads the Business Continuity Management framework, including business impact analysis, continuity planning, disaster recovery strategies, and readiness exercises. It also leads and develops a global Audit & Risk Management organization of 25 professionals, building capabilities and succession while fostering integrity, inclusion, accountability, collaboration, and continuous improvement. The position is based at Gilead’s headquarters in Foster City, California, and includes travel to Gilead affiliates and operations globally.

Requirements

At least 15 years of progressive experience in Internal Audit, enterprise risk management, public accounting, finance, controls, or related disciplines within complex global organizations.
Significant experience leading a global internal audit function for a publicly traded multinational company.
Broad expertise in risk-based internal audit, enterprise risk management, governance, internal controls, SOX, compliance, operational risk, and technology risk.
Experience owning or meaningfully leading enterprise risk management and risk governance, including assessing emerging risks and communicating enterprise risk to senior leadership and the Board.
Demonstrated success modernizing Internal Audit and risk management through technology, advanced analytics, automation, continuous auditing, and AI-enabled capabilities.
Experience assessing risks across commercial activities, technology and cybersecurity, supply chain, manufacturing, and other enterprise processes.
Strong understanding of professional Internal Audit standards and public-company governance and control requirements.
Proven ability to lead, develop, and mentor high-performing teams and build organizational capability and future leaders.
Significant experience interacting with Audit Committees and Boards of Directors.
Executive presence, judgment, and communication skills to engage credibly with the CEO and other senior executives.
Bachelor’s degree in Accounting, Finance, Business, or a related discipline.
Ability to travel to Gilead affiliates and operations globally.

Nice To Haves

Pharmaceutical or life sciences experience is valued but not required.
CPA, CIA, CISA, and/or an advanced degree is preferred.

Responsibilities

Develop and execute a comprehensive, risk-based Internal Audit strategy aligned with Gilead’s priorities, operating environment, and evolving risk profile.
Lead annual audit planning and risk assessment, adjusting priorities as conditions and emerging risks change.
Provide independent assurance across financial, operational, commercial, compliance, and technology risks and controls, including cybersecurity, data, supply chain, and manufacturing.
Evaluate governance, risk management, internal controls, and business processes; recommend practical improvements.
Oversee audit execution and quality across global operations and affiliates, and track and communicate significant findings and remediation plans.
Coordinate with external auditors and other assurance and compliance functions to promote effective risk coverage and reduce unnecessary duplication.
Lead the enterprise risk management framework and governance processes, including oversight of principal and emerging risks such as cybersecurity and AI.
Facilitate enterprise risk identification and assessment with senior leaders and risk owners, including evaluation of exposure, mitigation, and changes in the business and external environment.
Provide senior management and the Audit Committee with an integrated view of risks, themes, interdependencies, and emerging issues.
Evolve risk management toward dynamic and continuous monitoring, leveraging data and technology to identify changes in risk indicators earlier.
Set the vision and roadmap for modernizing Internal Audit and risk management, building on existing capabilities and adopting leading practices.
Advance technology, data analytics, automation, and AI across audit assessment, planning, testing, monitoring, and reporting.
Partner with technology, cybersecurity, and business leaders to incorporate risks, governance, and controls related to AI and other emerging technologies into audit and enterprise risk frameworks.
Lead development, implementation, and maintenance of the Business Continuity Management framework, policies, and resilience strategies.
Lead organization-wide business impact analyses to identify critical processes, dependencies, and recovery time and point objectives.
Oversee development and regular updates of Business Continuity Plans and technical disaster recovery strategies with IT and department leaders.
Design and facilitate tabletop exercises, functional drills, and full-scale disaster simulations to validate readiness and identify gaps.
Advise the Audit Committee on Internal Audit and enterprise risk matters, including significant risks, audit findings, control matters, and remediation progress.
Maintain effective Audit Committee communication and ensure the Internal Audit function has the independence, access, and authority needed to fulfill its responsibilities.
Build trusted relationships with the CEO, CFO, and senior leadership; communicate significant and emerging issues early and translate complex risks into decision-relevant insights.
Provide regular senior leadership updates on the enterprise risk landscape and facilitate discussion of emerging risks and mitigation priorities.
Balance independence and professional skepticism with a collaborative, pragmatic approach to working with the business.
Lead, develop, and mentor the global Audit & Risk Management organization, fostering integrity, intellectual curiosity, accountability, collaboration, and continuous improvement.
Develop emerging leaders, strengthen succession planning, and create opportunities for team members to broaden their experience and impact.
Build a technology-forward mindset and develop team capabilities for data-driven, AI-enabled audit and risk work.
Set clear priorities and performance expectations and deploy resources toward significant and rapidly evolving risks.
Model inclusive leadership; embed diversity, equity, and inclusion in team operations, decisions, and talent development.
Coach employees and provide feedback and opportunities that support current performance and future readiness.
Align team goals to enterprise and R&D priorities, clarify decision rights, remove barriers, and connect the team to the broader Public Affairs and R&D ecosystem.