Director - Risk Advisory

What You'll Do:

Enterprise Risk & Advisory Leadership:

· Advise clients on the design, implementation, enhancement, and transformation of enterprise risk, governance, compliance, and controls programs.

· Lead and advise on engagements across Enterprise Risk Management (ERM), Internal Audit outsourcing/co-sourcing, risk-based audit planning and execution, SOX/Section 404, operational risk, compliance, governance, and broader risk and controls transformation initiatives.

· Help organizations identify, assess, monitor, and respond to strategic, operational, financial, technology, cybersecurity, regulatory, and compliance risks.

· Serve as a trusted advisor to executive leadership, including Boards of Directors, Audit Committees, Chief Risk Officers, Chief Audit Executives, Chief Compliance Officers, CFOs, Controllers, and other senior stakeholders.

· Contribute to developing and implementing firm-approved, AI-enabled solutions for clients, in accordance with company policies on data protection, intellectual property, and professional standards

· Bring an AI-first mindset, staying informed of emerging AI tools and technologies and identifying opportunities to responsibly leverage AI, automation, and analytics to enhance risk management, internal audit, controls delivery, and broader client solutions.

SOX/Section 404 & Internal Controls Expertise:

· Lead SOX/Section 404 readiness, implementation, optimization, and compliance programs for public and pre-public companies.

· Advise growth-stage companies on establishing right-sized, scalable internal control frameworks that support regulatory compliance while enabling business growth and operational agility.

· Partner with mature organizations to evaluate, rationalize, optimize, and modernize SOX and internal control programs, driving efficiency, automation, and risk-focused coverage.

· Assess control environments, identify gaps, and develop practical remediation strategies that balance risk management, compliance expectations, and business objectives.

· Advise clients on governance, risk, and compliance leading practices related to COSO, Internal Control over Financial Reporting (ICFR), SEC requirements, and evolving regulatory expectations.

Cross-Functional Risk Advisory:

· Partner with all three lines of defense and cross-functional teams,, including Finance, Operations, Compliance, Legal, Risk Management, Technology, Information Security, Procurement, and Internal Audit.

· Help clients navigate complex and evolving regulatory, compliance, and risk management requirements while aligning risk programs with broader business objectives.

· Deliver integrated solutions that address risk, compliance, governance, process improvement, operational effectiveness, and organizational transformation objectives.

· Support clients in evaluating and enhancing risk management capabilities across multiple disciplines, including operational risk, third-party risk, compliance risk, and emerging risk areas.

Client Development & Practice Growth:

· Build and maintain executive-level relationships with key client stakeholders and serve as a strategic advisor across multiple buying centers.

· Identify, develop, and expand opportunities across Risk Advisory offerings, partnering with cross-functional teams to deliver integrated solutions.

· Collaborate with leadership to develop new service offerings, thought leadership, methodologies, and go-to-market strategies.

· Contribute to proposal development, client pursuits, and business development activities that drive practice growth and market presence.

· Play an integral role in shaping the New York Risk practice, collaborating across service lines, developing people and new offerings, working closely with firm leadership, and contributing meaningfully to the continued growth of the practice and broader firm.

Team Leadership:

· Lead, mentor, and develop professionals across the Risk Advisory practice.

· Foster a collaborative, high-performance environment focused on quality, innovation, and exceptional client service.

· Ensure engagements are delivered efficiently, effectively, and in accordance with firm standards.

What You'll Bring:

• Demonstrated leadership and deep expertise in one or more core Risk Advisory disciplines, including ERM, Internal Audit, SOX/Section 404, Governance, Risk & Compliance (GRC), Operational Risk, or Third-Party Risk Management.
• Demonstrated experience helping growth companies establish scalable governance, risk, and internal control frameworks, including SOX readiness and public company preparedness.
• Demonstrated success assessing, optimizing, and transforming mature risk and control programs to improve efficiency, effectiveness, and stakeholder value.
• Ability to operate credibly across the first, second, and third lines of defense and influence stakeholders across multiple functions and levels of an organization.
• Proven experience engaging a broad range of buyers and influencers, including CFOs, Controllers, CAEs, CROs, CCOs, CIOs, Boards, and Audit Committees.
• Strong understanding of evolving risk, regulatory, governance, and compliance trends and their impact on organizations across industries.
• Demonstrated ability to lead complex client engagements while driving business development and expanding client relationships.
• Consulting or professional services experience strongly preferred, including leading client engagements, managing executive relationships, and contributing to business development and practice growth.
• Excellent executive communication, relationship management, and leadership skills.
• Comfort with AI: Demonstrated ability to responsibly explore and adopt firm-approved AI tools to enhance productivity and innovation.
• Continuous Learning Mindset: Openness to learning and applying emerging technologies including AI and automation in alignment with firm policies and client standards.

Qualifications:

• Bachelor’s degree in business, finance, accounting, risk management, or a related field from an accredited university.

• Relevant professional certifications such as CPA, CIA, CRMA, CISA, CISM, CRISC

• Willingness to travel domestically up to 20% - 30% (travel varies based on client preferences)

• Willingness to be present on client site or in office 3 days a week, with 2 days a week remote (hybrid office environment)