Vice President, Enterprise Risk & Compliance

FHI 360; Durham (NC); On-site; USD 180,000 - 240,000; Full time

Job summary

FHI 360 in Durham, NC seeks a Vice President, Enterprise Risk & Compliance to lead the organization's ERM and second-line compliance programs across a complex funding landscape.

This executive will oversee an integrated risk framework, monitor top enterprise risks, coordinate with the Office of General Counsel, Finance, Programs, and regional partners, and ensure timely action to address gaps and evolving donor requirements.

Responsibilities

• Lead and strengthen ERM framework with top enterprise risks identified and communicated to senior leadership.
• Maintain the enterprise risk universe and focus on approximately 10-12 top enterprise risks requiring executive attention.
• Partner with risk owners to establish risk responses, KPIs, mitigation plans, escalation thresholds and reporting.
• Monitor changes in the organization's risk profile and identify emerging risks from changes in funding, regulations, technology, partnerships and strategy.
• Develop clear, decision-useful enterprise risk reporting for executive leadership and, as appropriate, the Board and its committees.
• Establish and maintain the organization's second-line compliance risk management and monitoring framework.
• Maintain a risk-based inventory of material compliance obligations, including donor and funder requirements, U.S. Government requirements, sanctions, anti-bribery and anti-corruption requirements, conflicts of interest, privacy and data protection.

Job description

The Vice President, Enterprise Risk & Compliance provides enterprise leadership for the organization's enterprise risk management (ERM) and second-line compliance functions. The role is responsible for establishing and maintaining an integrated, risk-based framework that enables the organization to identify, assess, monitor and respond to its most significant enterprise and compliance risks. Operating across a complex global environment and an evolving funding landscape, the Vice President will help ensure that the organization anticipates emerging risks, understands its material compliance obligations, and takes timely and appropriate action to address identified gaps. The Vice President will work closely with the Office of General Counsel (OGC), Finance, Business Development, Programs, Human Resources, Procurement, Safeguarding, country and regional leadership, and other functions while maintaining clear accountability across the three lines model. The role will be particularly important as the organization diversifies its funding portfolio, including increased use of fixed-price and Fixed Amount Award (FAA) instruments, new donor and funder requirements, and funding arrangements with differing indirect cost recovery and risk profiles.

Enterprise Risk Management

• Lead and continuously strengthen the organization's enterprise risk management framework, ensuring that significant risks are identified, assessed, prioritized, monitored and communicated to senior leadership.
• Maintain the enterprise risk universe while facilitating identification of a focused set of approximately 10-12 top enterprise risks requiring executive-level attention based on their potential financial, reputational, operational, compliance and mission impact.
• Partner with executive and functional risk owners to establish appropriate risk responses, key risk indicators, mitigation plans, escalation thresholds and reporting.
• Monitor changes in the organization's risk profile and proactively identify emerging risks resulting from changes in funding, operating environments, regulations, technology, partnerships and organizational strategy.
• Develop clear, decision-useful enterprise risk reporting for executive leadership and, as appropriate, the Board and its committees.

Compliance Risk & Monitoring

• Establish and maintain the organization's second-line compliance risk management and monitoring framework.
• Maintain a risk-based inventory of material compliance obligations, including applicable donor and funder requirements, U.S. Government requirements, sanctions, anti-bribery and anti-corruption requirements, conflicts of interest, privacy and data