VP of Internal Controls and Risk Management

Korn Ferry; Duluth (GA); On-site; USD 155,000 - 195,000; Full time

Job summary

Korn Ferry, in partnership with our client, seeks a VP of Internal Controls and Risk Management to lead the organization’s internal controls and enterprise risk management programs. The role oversees SOX 404, MAR, ORSA reporting, and ERM activities, partnering with executives, business stakeholders, and auditors to strengthen the control environment and regulatory compliance.

The VP will drive risk identification, dashboards, and governance processes while guiding leadership on mitigation

Qualifications

• 10+ years of risk management, internal controls, audit, accounting, or financial governance.
• Experience leading SOX 404 compliance and internal control assessments.
• Demonstrated ability to communicate complex risk matters to senior leaders.

Responsibilities

• Lead design, execution, and continuous improvement of SOX 404 and Model Audit Rule programs.
• Oversee documentation, testing, evidence collection, and assessment of internal controls over financial reporting.
• Partner with external auditors to support audits and ensure efficient execution of procedures.
• Drive remediation of control deficiencies and implement process improvements.
• Manage enterprise risk management framework, governance, and reporting to executives.

Skills

SOX 404 compliance

ERM program management

Regulatory compliance

Internal controls

ORSA reporting

Stakeholder collaboration

Project leadership

Education

Bachelor's degree in Accounting/Finance

Master's degree preferred

Job description

Korn Ferry has partnered with our client on their search for the role, VP of Internal Controls and Risk Management.

VP of Internal Controls and Risk Management

VP of Internal Controls and Risk Management is responsible for leading the organization's internal control and enterprise risk management programs. This role oversees Sarbanes-Oxley (SOX) 404 compliance, Model Audit Rule (MAR) compliance, Own Risk and Solvency Assessment (ORSA) reporting, and enterprise risk management (ERM) activities. The Director, Risk Management & Internal Controls will partner with executive leadership, business stakeholders, and external auditors to strengthen the control environment, identify emerging risks, and ensure compliance with regulatory requirements while supporting the company's strategic objectives.

Responsibilities & Qualifications

Internal Controls, SOX & Regulatory Compliance

• Lead the design, execution, and continuous improvement of the Company's SOX 404 and Model Audit Rule compliance programs.
• Oversee end-to-end documentation, testing, evidence collection, and assessment of internal controls over financial reporting.
• Partner with external auditors to support audit activities and ensure efficient execution of audit procedures.
• Monitor and drive remediation efforts for identified control deficiencies and provide recommendations for process improvements.
• Support the integration of new accounting standards, business initiatives, and significant transactions into the control environment.
• Manage and enhance the Company's enterprise risk management framework, policies, and governance processes.
• Facilitate risk identification, assessment, monitoring, and reporting activities across the organization.
• Develop and present risk dashboards, scorecards, and reports to executive leadership and governance committees.
• Partner with first-line and second-line risk functions to strengthen operational and financial controls.
• Collaborate with Information Technology teams to ensure appropriate risk and control considerations are incorporated into strategic technology initiatives and change management activities.

Risk Governance & Regulatory Reporting

• Lead enterprise risk reporting to regulatory agencies, rating agencies, and other external stakeholders.
• Oversee preparation and submission of ORSA filings, Enterprise Risk Reports, and other required regulatory submissions.
• Develop and monitor key risk indicators (KRIs), risk tolerance metrics, and risk appetite measures.
• Evaluate emerging risks and provide recommendations to executive leadership regarding mitigation strategies.
• Coordinate quarterly Business Risk and Controls Committee meetings and support overall risk governance activities.

Leadership

• Provide leadership, coaching, and development for assigned team members.
• Foster a culture of accountability, transparency, and continuous improvement.
• Build collaborative relationships across business functions and influence risk-aware decision making throughout the organization.

Required Qualifications

Education

• Bachelor's degree in Accounting, Finance, Risk Management, Business Administration, or a related field.
• Master's degree preferred.

Experience

• 10+ years of progressive experience in risk management, internal controls, audit, accounting, or financial governance.
• Experience leading SOX 404 compliance and internal control assessments.
• Demonstrated experience developing and managing enterprise risk management programs.
• Experience presenting complex risk and control matters to senior executives and governance committees.
• Strong project management and cross-functional leadership experience.

Certifications

• Certified Public Accountant (CPA) required.
• CIA, CISA, or other relevant professional certifications preferred.

Compensation: $155,000 - $195,000 salary plus 30% variable compensation