Vice President, Enterprise Risk & Compliance

The Vice President, Enterprise Risk & Compliance provides enterprise leadership for the organization's enterprise risk management (ERM) and second-line compliance functions. The role is responsible for establishing and maintaining an integrated, risk-based framework that enables the organization to identify, assess, monitor and respond to its most significant enterprise and compliance risks. Operating across a complex global environment and an evolving funding landscape, the Vice President will help ensure that the organization anticipates emerging risks, understands its material compliance obligations, and takes timely and appropriate action to address identified gaps. The Vice President will work closely with the Office of General Counsel (OGC), Finance, Business Development, Programs, Human Resources, Procurement, Safeguarding, country and regional leadership, and other functions while maintaining clear accountability across the three lines model. The role will be particularly important as the organization diversifies its funding portfolio, including increased use of fixed-price and Fixed Amount Award (FAA) instruments, new donor and funder requirements, and funding arrangements with differing indirect cost recovery and risk profiles. Enterprise Risk Management - Lead and continuously strengthen the organization's enterprise risk management framework, ensuring that significant risks are identified, assessed, prioritized, monitored and communicated to senior leadership. - Maintain the enterprise risk universe while facilitating identification of a focused set of approximately 10–12 top enterprise risks requiring executive-level attention based on their potential financial, reputational, operational, compliance and mission impact. - Partner with executive and functional risk owners to establish appropriate risk responses, key risk indicators, mitigation plans, escalation thresholds and reporting. - Monitor changes in the organization's risk profile and proactively identify emerging risks resulting from changes in funding, operating environments, regulations, technology, partnerships and organizational strategy. - Develop clear, decision-useful enterprise risk reporting for executive leadership and, as appropriate, the Board and its committees. Compliance Risk & Monitoring - Establish and maintain the organization's second-line compliance risk management and monitoring framework. - Maintain a risk-based inventory of material compliance obligations, including applicable donor and funder requirements, U.S. Government requirements, sanctions, anti-bribery and anti-corruption requirements, conflicts of interest, privacy and data protection, safeguarding-related requirements, and other significant regulatory obligations. - Lead periodic compliance risk assessments to identify areas presenting the greatest financial, regulatory, donor, operational and reputational exposure. - Develop and execute an annual, risk-based Compliance Monitoring Plan that is separate and distinct from the Internal Audit Plan. - Conduct or coordinate second-line monitoring to assess whether key compliance controls are operating effectively and whether significant requirements are being consistently implemented. - Identify systemic and emerging compliance issues and provide constructive challenge to management regarding the adequacy of corrective actions. - Track and escalate management's remediation of significant compliance issues. Funding Portfolio & New Funding Risk - Develop a risk-based framework for assessing material or non-standard new funding opportunities and funding mechanisms. - Coordinate structured risk assessments with Business Development, OGC, Finance, Programs and other relevant functions to identify significant compliance, financial, operational, partner and reputational risks before the organization accepts material new funding arrangements. - Support management in understanding risks associated with an evolving funding portfolio, including: U.S. Government and other donor/funder compliance requirements; Fixed Amount Awards and other fixed-price instruments; low indirect-cost-recovery arrangements; milestone and performance-based payment structures; cost-recovery and financial sustainability; new donor and funding mechanisms; new or higher-risk partners and subrecipients; and cumulative portfolio-level funding risks. - Develop portfolio-level risk indicators that enable leadership to understand trends in funding concentration, fixed-price exposure, low-ICR funding, cost recovery, milestone/payment exposure and other material funding risks. - The Vice President will not replace the decision-making responsibilities of Business Development, Finance, Programs, OGC or executive management, but will provide independent second-line risk coordination, monitoring and challenge. Compliance Enablement, Training & Remediation - Proactively translate compliance-monitoring results, emerging risks and regulatory or donor developments into appropriate organizational action. - Work with responsible departments and subject-matter experts to determine whether identified gaps require training, communications, policy revisions, procedures, job aids, system changes, enhanced controls or other corrective measures. - Ensure that appropriate owners are assigned to significant compliance actions and monitor implementation through completion. - Assess whether significant corrective actions have effectively addressed the underlying compliance risk and escalate persistent or systemic issues. - Coordinate with OGC regarding legal and regulatory interpretation and with relevant functional leaders regarding the development and delivery of technical training and communications. - Promote a culture in which compliance is understood as a management responsibility rather than solely the responsibility of a centralized compliance function. Three Lines Accountability The Vice President will help reinforce clear accountability across the organization's governance model: - Management and Business Functions own compliance, implement requirements and operate controls. - OGC interprets applicable laws, regulations, contractual requirements and donor/funder requirements from a legal perspective. - Enterprise Risk & Compliance establishes the second-line risk and compliance framework, assesses risk, conducts risk-based monitoring, facilitates organizational responses to emerging gaps, and tracks and escalates remediation. - Internal Audit remains independent from the operation of the compliance framework and provides objective assurance regarding the effectiveness of governance, risk management and internal controls. - Executive Leadership and the Board/Audit Committee provide appropriate oversight and risk governance. Leadership & Collaboration - The Vice President will serve as a trusted risk and compliance advisor to senior leadership and will be expected to influence across organizational boundaries without assuming management's responsibilities. - The successful candidate will build strong partnerships across legal, financial, programmatic and operational functions and will be able to translate complex risk and compliance matters into practical business decisions. - The role requires the ability to challenge constructively, distinguish between material and lower-level risks, and focus organizational attention and resources on issues that could materially affect the organization's financial sustainability, reputation, mission or ability to operate. Qualifications - Bachelor's degree in business, finance, law, accounting, international development, risk management or a related field; advanced degree preferred. - Significant senior-level experience in enterprise risk management, compliance, donor/funder compliance, governance, or a related discipline. - Demonstrated experience designing or leading enterprise risk and/or compliance programs in a complex, decentralized organization. - Strong understanding of risk-based compliance monitoring and the respective roles of management, legal/compliance and Internal Audit within a three lines model. - Experience with U.S. Government-funded programs and applicable compliance frameworks strongly preferred. - Experience with international development, humanitarian, nonprofit or similarly complex global operating environments strongly preferred. - Understanding of different funding mechanisms, including cost-reimbursement, fixed-price, milestone-based and Fixed Amount Award structures. - Demonstrated ability to evaluate financial, compliance, operational and reputational risks associated with new funding arrangements and partnerships. - Experience working with senior executives and presenting complex risk matters to executive leadership and/or Board committees. - Strong analytical judgment and the ability to prioritize a broad risk universe into a focused set of material enterprise risks. - Demonstrated ability to influence across functions and geographies without direct authority. - Excellent written, verbal, facilitation and executive communication skills. Preferred Experience Experience in several of the following areas would be particularly valuable: - U.S. Government and institutional donor compliance; enterprise risk management; subrecipient and partner risk; sanctions and third-party due diligence; anti-bribery and anti-corruption; conflicts of interest; regulatory compliance; funding diversification; cost recovery; fixed-price and performance-based awards; compliance monitoring; investigations; safeguarding; and international operations. Success in the Role Success will be demonstrated by the organization's ability to: - Focus leadership attention on its most significant enterprise risks; identify emerging compliance and funding risks before they become significant issues; maintain effective risk-based compliance monitoring; respond promptly to identified compliance gaps; make informed decisions about new funding opportunities and funding mechanisms; understand the cumulative financial and operational risks within its funding portfolio; strengthen accountability for risk and compliance across business functions; and provide senior leadership and the Board with timely, concise and actionable risk information. The expected US Based hiring salary range for this role is listed below. Candidates FHI 360 pay ranges represent national averages that vary by geographic location. When determining an offer amount, FHI 360 factors in multiple considerations, including but not limited to: relevant years of experience and education possessed by the applicant, internal equity, business sector, and budget. For internal candidates, salary placement will also follow FHI 360’s current promotional increase guidelines. Final compensation will be determined in accordance with applicable law and FHI 360 policy. Base salary is only one component of our offer. FHI 360 contributes 7% of monthly base pay to a money purchase pension plan account. Additionally, all US-based staff working full-time, which is calculated at 40 hours/week, receive 18 days of paid vacation per year, 12 sick days per year, and 11 holidays per year. Paid time off is reduced pro rata for employees working less than a full-time schedule. US Based Hiring Salary Range: 185,000 - 215,000 USD Annual International hiring ranges will differ based on location This job posting summarizes the main duties of the job. It neither prescribes nor restricts the exact tasks that may be assigned to carry out these duties. This document should not be construed in any way to represent a contract of employment. Management reserves the right to review and revise this document at any time. FHI 360 is an equal opportunity employer whereby we do not engage in practices that discriminate against any person employed or seeking employment based on race, color, religion, sex, sexual orientation, gender identity, national or ethnic origin, age, marital status, physical or mental disability, protected Veteran status, or any other characteristic protected under applicable law. Our values and commitments to safeguarding:FHI 360 is committed to preventing any type of abuse, exploitation and harassment in our work environments and programs, including sexual abuse, exploitation and harassment. FHI 360 takes steps to safeguard the welfare of everyone who engages with our organization and programs and requires that all personnel, including staff members and volunteers, share this commitment and sign our code of conduct. All offers of employment will be subject to appropriate screening checks, including reference, criminal record and terrorism finance checks. FHI 360 also participates in the Inter-Agency Misconduct Disclosure Scheme (MDS), facilitated by the Steering Committee for Humanitarian Response. In line with the MDS, we will request information from job applicants’ previous employers about any substantiated findings of sexual abuse, exploitation and/or harassment during the applicant’s tenure with previous employers. By applying, job applicants confirm their understanding of these recruitment procedures and consent to these screening checks. FHI 360 will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws. FHI 360 will never ask you for your career site username or password, and we will never request money, goods or services during the application, recruitment or employment process. If you have questions or concerns about correspondence from us, please email . FHI 360 fosters the strength and health of its workforce through a competitive benefits package, professional development and policies and programs that support a healthy work/life balance. Join our global workforce to make a positive difference for others — and yourself. Please click here to continue searching FHI 360's Career Portal. Originally posted on Himalayas