Position SummaryThe Associate Director, Enterprise Risk Management position is located in Washington, DC, and reports to the Chief Operating Officer. This position serves as the primary lead for coordinating and supporting the PCAOB's enterprise risk management program. The role is responsible for helping develop, maintain, and implement a practical enterprise risk framework and risk appetite approach in collaboration with division and office leaders. The Associate Director supports the integration of risk management practices into strategic planning, business operations, and risk identification and mitigation activities, and provides guidance to help leaders assess, monitor, and manage risks consistent with the organization's mission, size, and risk profile.
Responsibilities- Oversees and continuously improves a practical, scalable enterprise risk management program tailored to the organization's size, mission, and risk profile, working with leadership to identify, assess, monitor, and address key risks.
- Reports periodically to the Chief Operating Officer and the Board, as needed, on the effectiveness of the enterprise risk management program.
- Works closely with division and office leaders to provide risk-based guidance, support constructive challenge, and help ensure that significant activities and decisions are evaluated for their potential impact on the organization's risk profile.
- Maintains and updates enterprise risk management policies, procedures, and guidance that outline expected risk management practices; works with division and office leaders to support consistent application and alignment with applicable legal, regulatory, and organizational requirements.
- Supports the development and periodic review of the organization's risk appetite statement by coordinating input from division and office leaders, maintaining defined risk criteria, and preparing materials for leadership consideration that reinforce managers' responsibility for owning and managing risk.
- Advises divisions and offices on practical approaches to identifying, assessing, and managing operational risks, including the development of controls and mitigation strategies that support compliance and effective business operations.
- Partners with Human Resources and division and office leaders to support risk management training and awareness efforts that help staff understand their role in identifying, escalating, and managing risks across the organization.
- Performs the full range of supervisory duties, including evaluating employee performance; making recommendations for appointment and promotion; hearing and resolving complaints; identifying development and training needs of employees; other related supervisory tasks; and
- Recruits, maintains, and develops staff consistent with business needs.
QualificationsEducation/Technical Expertise
- Bachelor's degree in business administration, Accounting, Finance, Risk Management, Public Administration, or a related field; advanced degree or relevant professional certification preferred.
- Minimum of 12+ years of progressively responsible experience supporting, developing, implementing, or managing enterprise risk management, internal controls, compliance, audit, or related governance programs.
- Strong working knowledge of enterprise risk management principles, risk identification and assessment methods, risk mitigation practices, internal controls, and related governance frameworks.
- Ability to assess business processes, identify key risks and controls, evaluate control design and operating effectiveness, and recommend practical improvements.
- Demonstrated experience coordinating risk assessments, developing mitigation plans, tracking risk responses, and communicating risk information to management and other stakeholders
- Ability to use available tools and technologies to support risk assessments, risk reporting, issue tracking, monitoring activities, and policy administration.
- Self-starter with the ability to manage multiple ongoing assignments, exercise sound judgment, and operate effectively in areas where issues may be complex or not fully defined.
- Experience working across divisions or functions to reconcile differing perspectives, build alignment, and support practical risk-informed solutions.
- Ability to clearly articulate risk-based positions using sound analysis, relevant evidence, and balanced judgment.
- Ability to collaborate effectively with internal stakeholders and, as appropriate, external parties on enterprise risk management matters.
- Strong verbal and written communication skills, including the ability to prepare clear risk reports, briefings, and recommendations for management audiences.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Leadership/Management Skills and Abilities
- Ability to drive a positive "tone at the top" of the organization and hold others accountable for doing the same.
- Ensures that own behavior and the behavior of others is consistent with the highest ethical standards and aligns with the values of the organization.
- Must be able to motivate and inspire employees at all levels of the organization to enhance team commitment and individual performance.
- Proven skill as a leader capable of building, managing, and retaining a talented staff.
- Proven ability to develop, coach, and mentor staff, providing constant feedback and clear direction.
- Ability to promote collaboration by unifying teams, setting common goals, and incentivizing collaborative behavior.
- Demonstrated success in establishing and maintaining positive working relationships with others, both internally and externally, to achieve the goals of the organization.
- Strong ability to build credibility, organize effectively, solve problems quickly and communicate clearly.
- Possesses the balance and emotional intelligence required to meet the diverse needs of the other PCAOB Divisions and Offices.
- Proven ability to navigate and resolve various types of conflict in a timely and productive manner.
