HR Policy, Risk & Controls Manager

Role Overview

The HR Policy, Risk & Controls Manager plays a critical role in ensuring HR policies, processes, and programs align with internal controls, regulatory requirements, and the company's risk management framework. The role provides oversight across HR policy, risk, compliance, controls, and audit activities, partnering with HR functional leaders to ensure controls are appropriately designed, documented, and consistently followed. As a second line of defense, this role provides oversight and monitoring of HR risks and controls while partnering with Internal Audit and external auditors to support effective governance and compliance.

Key Responsibilities

• Develop and maintain HR policies and procedures in alignment with regulatory and company requirements.
• Monitor HR compliance and identify, assess, and mitigate emerging risks.
• Lead compliance assessments, corrective actions, and remediation activities.
• Monitor HR risk indicators and provide reporting and insights to HR leadership.
• Oversee data privacy and employee investigation governance from an HR compliance perspective.
• Lead HR regulatory reporting, compliance documentation, and HR training as appropriate.
• Monitor HR risk indicators and trends, investigate root causes, and partner with functional leaders to address emerging risks.
• Own and maintain the HR Risk & Control Matrix (RCM), ensuring it remains current and aligns with HR processes and risks.
• Partner with HR functional owners to ensure controls are understood, appropriately designed, consistently executed, and supported by sufficient documentation.
• Conduct periodic control checks and quarterly assessments to identify gaps and drive remediation.
• Oversee HR SOX controls, including documentation, testing, evidence, and remediation.
• Partner with Internal Audit and external auditors to facilitate control walkthroughs, testing, and information requests.
• Lead or support HR audits and ensure findings are appropriately documented and remediated.
• Serve as a central point of contact for HR risk, controls, compliance, and audit matters.
• Provide guidance to HR leaders and functional teams to strengthen the overall HR control environment.
• Prepare risk, compliance, and audit reporting for HR leadership and relevant stakeholders, and track remediation activities through completion.
• Decides when to escalate HR risks, compliance issues, and investigation outcomes to leadership.
• Determines control priorities and remediation actions based on risk assessments and audit findings.
• Evaluates and approves updates to HR policies, procedures, and SOX controls to meet regulatory and business needs.
• Identifies data trends and root causes to inform risk mitigation strategies.

Requirements

• Bachelor's degree in human resources, Business Administration, Risk Management, Compliance or a related field required.
• Master's degree in HR, Business, Law, or a related discipline a plus.
• Relevant certifications preferred (e.g., PHR/SPHR, SHRM-CP/SCP, Certified Compliance & Ethics Professional - CCEP)
• Minimum of 5 years of experience in HR, compliance, internal audit, risk management or a similar function. The candidate should also have experience in a fast-paced professional environment and work with cross-functional teams.Strong understanding of risk management principles and compliance frameworks.
• Familiarity with HR systems, data privacy laws (e.g., GDPR, CCPA), and internal audit practice.
• Strong analytical skills to interpret HR metrics and identify trends or red flags.
• Excellent communication and stakeholder management, especially when partnering with HR, Legal, Audit, and Risk functions.
• High attention to detail, integrity, and ability to maintain confidentiality.
• Critical thinking and problem-solving mindset with a proactive approach to compliance.
• Advanced Excel skills for data analysis and risk reporting (pivot tables, lookups, dashboards).
• Proficiency with HRIS (Workday) and audit/compliance tools • Familiarity with data visualization or reporting tools (e.g., Power BI).
• Experience with document management and workflow tools (e.g., SharePoint, Smartsheet).

#Li-LB1

#Li-Hybrid

The base pay range below is what Legend Biotech USA Inc. reasonably expects to offer at the time of posting. Actual compensation may vary based on experience, skills, qualifications, and geographic location. The company reserves the right to modify this range as needed and in accordance with applicable laws.

Other Types of Pay: Performance-based bonus and/or equity is available to employees in eligible roles.

Benefits and Paid Time Off: Medical, dental, and vision insurance as well as a 401(k) retirement plan with a company match that vests fully on day one. We offer eight (8) weeks of paid parental leave after just three (3) months of employment, and a paid time off policy that includes vacation time, personal time, sick time, floating holidays, and eleven (11) company holidays. Additional voluntary benefits include flexible spending and health savings accounts, life and AD&D insurance, short- and long-term disability coverage, legal assistance, and supplemental plans such as pet, critical illness, accident, and hospital indemnity insurance. We also provide voluntary commuter benefits, family planning and care resources, well-being initiatives, and peer-to-peer recognition programs; demonstrating our ongoing commitment to building a culture where our people feel empowered, supported, and inspired to do their best work.

Pay Range (Base Pay):

$110,706-$145,303 USD

Please note: These benefits are offered exclusively to permanent full-time employees. Contractors are not eligible for benefits through Legend Biotech.