Director, Procurement Risk, Audit and Compliance

Purpose: The Director, Risk & Compliance Strategy plays a critical role in strengthening procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The Director, Risk & Compliance is responsible for ensuring the deployment of strategies within the Risk & Compliance teams in addition to leading and coaching a team, ensuring their professional development aligns with organizational goals. This role demands a candidate with a robust background in enterprise risk management, including areas like IT security, procurement, cybersecurity, business continuity, quality, supplier management, and / or legal.      Responsibilities: • Lead the enterprise procurement risk, audit, and compliance strategy, translating priorities into effective governance, controls, and assurance plans. • Establish a procurement risk-management framework covering identification, assessment, mitigation, monitoring, escalation, and reporting. • Lead the integration of Future-State AI tools (AI Risk Intelligence, Predictive Models, Monitoring Agents, and Copilot-Enabled Insights) to automate and optimize risk and compliance functions. • Drive the PRAC 2026-2028 capability roadmap, shifting functional maturity from foundational monitoring to an “Anticipate & Orchestrate” (Risk), “Automate & Optimize” (Audit), and “Predict & Prevent” (Compliance) state. • Implement continuous AI-led monitoring to shift compliance controls from detective to preventive, reducing recurring issues and enabling early identification of compliance weaknesses. • Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, enabling dynamic prioritization and proactive crisis response based on real-time data and predictive analytics. • Design and oversee a risk-based audit program for procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls; track corrective actions through closure. • Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations. • Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls. • Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations. • Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness. • Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings. • Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices. • Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals. • Bachelor’s degree in business, supply chain, finance, accounting, law, risk management, or a related field; advanced degree preferred. • 10+ years of progressive experience in procurement, enterprise risk management, audit, compliance, internal controls, or related disciplines, including leadership experience. • Demonstrated experience designing and implementing risk-based compliance and audit strategies in a complex, regulated, or global organization. • Strong knowledge of procurement lifecycle controls, strategic sourcing, contracting, supplier management, third-party risk, and purchase-to-pay processes. • Broad enterprise risk-management experience spanning IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal. • Knowledge of relevant compliance, governance, and control frameworks; CPA,