Senior Program Manager - Compliance Governance, FinOps & Supplier Risk

Extensive experience in governance, compliance strategy, and regulatory compliance within complex business environments. Proven ability to lead compliance risk management initiatives, including gap analysis and policy development. Excellent communication skills to effectively convey compliance information and influence senior leadership. Expertise in analyzing regulatory trends and developing strategic responses to evolving legislation. Demonstrated capability to manage multiple projects, prioritize tasks, and drive continuous improvement. Commitment to upholding ethical standards and fostering a culture of integrity and accountability. Bachelor's Degree in Business, Operations, Finance, or related field AND 4+ years experience in program management, process management, or process improvement OR equivalent experience. 8+ years of experience in compliance, risk management, internal controls, audit, governance, or complex program management, including experience supporting finance operations, procurement, supplier or third-party risk, or another highly regulated business environment. Demonstrated ownership of an enterprise-scale policy, compliance, risk, or governance program, including responsibility for program design, stakeholder alignment, implementation, performance monitoring, and measurable outcomes. Executive-level written and verbal communication skills, including the ability to synthesize complex compliance, risk, and performance information into clear narratives, decisions, tradeoffs, and actionable recommendations for senior leaders.

independently defining and leading complex, large-scale cross-functional programs, including plans, milestones, dependencies, risks, executive communications, and measurable outcomes, while managing multiple concurrent workstreams across a highly matrixed organization.

Working knowledge of regulatory regimes affecting procurement and finance, such as anti-corruption, data protection, and supply-chain due-diligence requirements, with direct SOX/ICFR or broader Controls and Compliance experience in control design, testing, audit support, and remediation.

translating external obligations into practical policy frameworks, operational standards, guidance, and sustainable business processes that protect compliance outcomes and the user support experience.

applying AI, automation, or advanced analytics to improve the efficiency, consistency, or effectiveness of risk and compliance operations, with an understanding of responsible-use, governance, and control considerations.

Strong analytical, financial, and business acumen, with the ability to synthesize qualitative and quantitative information; evaluate business impact, return on investment, KPIs, performance, and value drivers; apply core data analytics; and present actionable recommendations to management.

designing, implementing, or governing enterprise-scale compliance frameworks, controls, audit-readiness activities, and risk-management processes, including mechanisms to monitor obligations, track remediation, escalate issues, and drive accountability across multiple stakeholder groups.

Proven ability to build trusted partnerships, influence without direct authority, and drive alignment, accountability, and outcomes across cross-functional stakeholders, business leaders, and multiple manager-led teams.

Executive-level written and verbal communication skills, including data-driven storytelling and the ability to create clarity from ambiguity, frame risks and tradeoffs, articulate decisions and asks, and present actionable recommendations to senior leaders.

Demonstrated commitment to integrity, inclusion, accountability, continuous learning, and a learn-it-all culture, with a track record of valuing diverse perspectives, leading inclusive change, navigating ambiguity, and delivering business results with a strong compliance focus.

Relevant professional certification, such as CPA, CIA, CISA, CRISC, or a comparable credential.

Establish and manage an integrated risk-management framework across FinOps, including a centralized risk repository, consistent assessment and prioritization criteria, accountable ownership, escalation thresholds, and remediation tracking.

Synthesize assessments, incidents, audit findings, control deficiencies, supplier-risk signals, and other compliance indicators into prioritized risk themes, mitigation plans, and leadership decisions.

Establish and manage a formal risk-acceptance and exception-management program that governs decisions to accept, defer, or otherwise manage compliance or operational risk outside established requirements.

Define decision criteria, approval authority, documented rationale, compensating actions, expiration and renewal requirements, escalation thresholds, and closure standards.

Maintain a centralized record of approved exceptions and accepted risks, monitor residual exposure and aging, and surface emerging concentrations for leadership review.

Lead regulatory readiness by identifying emerging obligations, assessing FinOps impacts, and translating requirements into scalable policies, operational standards, controls, workflows, guidance, and training.

Identify compliance gaps, assign accountable owners, and track implementation and remediation through closure while protecting the user support experience.

Influence the FinOps supplier-risk governance model, including risk tiering, assessment standards, escalation thresholds, and consistent requirements across supplier compliance, security, privacy, financial health, and other relevant third-party risk domains.

Ensure material supplier risks are incorporated into the broader FinOps risk repository, mitigation process, and executive reporting.

Partner with Controls + Compliance and the SOX program to map policies and regulatory obligations to controls, strengthen assurance capabilities, support internal and third-party audits, and drive timely remediation of control deficiencies, audit findings, and corrective actions.

Identify, prioritize, and deploy responsible AI-enabled automation, workflow improvements, and process-optimization solutions that strengthen compliance monitoring, risk analysis, evidence and case management, executive reporting, operational efficiency, and decision quality at scale.

Lead core compliance operating rhythms, issue and risk reviews, action tracking, and audit-readiness activities across prioritized workstreams.

Define compliance health metrics, operational KPIs, reporting standards, and dashboards that measure delivery progress, compliance adoption, risk reduction, and business outcomes.

Translate results into clear leadership decisions, tradeoffs, escalation needs, and accountable next steps.

Conduct cross-organizational analysis of compliance requirements, business risks, operational impacts, control gaps, and process-improvement opportunities.

Translate findings into scalable governance solutions and actionable mitigation plans, and drive alignment and execution with accountable stakeholders.

Build alignment across compliance leads, champions, business owners, and cross-functional stakeholders to establish clear decision rights, accountable ownership, execution plans, escalation paths, and timely resolution of compliance risks and actions.