[Hiring] Associate Director, Enterprise Risk and Internal Audit @VITAMIN ANGEL ALLIANCE INC

Role Description

The Associate Director, Enterprise Risk and Internal Audit will lead Vitamin Angels’ internal audit function, providing independent and objective assurance to the Audit & Finance Committee, the Board and the Senior Leadership Team on the adequacy and effectiveness of the organization’s risk management, internal controls and compliance frameworks.

The Associate Director reports to, and works closely with the General Counsel, who leads the Legal & Compliance function, in building Vitamin Angels' enterprise risk management capability and establishing the organization’s internal audit function.

Neither capability exists today in a formal way. This role will build the foundation before becoming a maintenance role. It is anticipated that the first twelve months will be spent establishing frameworks, charters and practices largely from scratch, under the direction of the General Counsel and CFAO.

As part of Vitamin Angels 2030 (our new three-year strategy), VA is shifting from a largely unrestricted, relationship-driven funding model toward one that includes significantly more restricted and institutional grant funding — with the compliance, reporting and control expectations that come with this. This role is a consequential hire in this transition.

Major Duties and Responsibilities

• Enterprise Risk Management
  • Establish Vitamin Angels' baseline enterprise risk framework: identify, assess and prioritize top enterprise risks across financial, operational, programmatic, compliance and technology domains, with a named owner for each.
  • Build and maintain a living risk register, refreshed on a regular cadence, tracking risk status, mitigation plans and ownership.
  • Establish a regular risk reporting cadence for the Senior Leadership Team (SLT) and the Board, including at least an annual enterprise risk review.
  • Facilitate cross-functional risk identification and assessment for the various VA entities and headquarters functions, including country offices, operations and programs.
  • Support scenario planning and contingency planning led by the CFAO and SLT, bringing a structured risk lens to major decisions.
• Internal Audit
  • Collaborate with the General Counsel and Finance to establish the internal audit function, design the internal control framework across financial, operational, compliance and governance processes, and secure approval from the Board's Audit and Finance Committee.
  • Develop Vitamin Angels' risk-based internal audit plan, prioritized by exposure and likelihood.
  • Conduct or coordinate internal audits across financial, operational, compliance and governance areas, with initial focus informed by known control gaps, including international cash management, consultant and vendor access controls, grants compliance readiness, and country operations and programs.
  • Track remediation of audit findings and control exceptions to closure and report status transparently to leadership and the Audit and Finance Committee.
  • Coordinate with Vitamin Angels' external auditors to ensure internal and external audit work is complementary and non-duplicative.
• Cross-Functional
  • Actively support the GC and CFAO in playing an influencing role in strengthening the organization’s control environment and broadening the understanding of risk, controls, oversight and accountability in the organization.
  • Partner with the Director of Technology on cybersecurity risk governance, including establishing the formal risk reporting cadence the organization's technology program currently lacks.
  • Partner with General Counsel and the Compliance team on operating policies as monitored controls, including exception identification and resolution.
  • Serve as the accountable owner for the Risk, Compliance and Assurance results.
  • Partner closely with the General Counsel and CFAO to ensure enterprise risk and audit findings inform the pace and sequencing of the Operations Pathway.
  • Provide periodic risk and audit updates directly to the General Counsel and CFAO.
• Other duties
  • The duties and responsibilities set out above are not exhaustive and the role holder may be required to carry out additional duties within reasonableness of their level of skills and experience.

Qualifications

• Certified Internal Auditor (CIA) designation required.
• Other relevant certifications (CPA, ACCA, CA, CISA) are a plus.

Requirements

• 7+ years of combined experience in internal audit and enterprise risk management.
• Proven ability and experience to communicate, negotiate and challenge risk and control practices at all levels of organizational hierarchy.
• Strong knowledge of governance, enterprise risk management, internal controls, regulatory compliance and audit methodologies.
• Strong working knowledge of IIA’s International Professional Practices Framework (IPPF) and Code of Ethics.
• An outcomes focus with direct experience applying risk-based internal auditing and good understanding of the Three Lines Model.
• Demonstrated ability to present audit findings, recommendations and strategic insights to SLT, Audit & Finance Committee, and Boards.
• Strong interpersonal skills, including influencing, negotiation, coaching and relationship building in a wide range of cultural environments.
• Experience leading, working on and delivering multiple projects, with conflicting priorities, on a timely basis.
• Self-motivated with a proven ability to work independently and with minimal supervision.
• Native or professional-level English proficiency required; ability to conduct audits and draft executive summaries and present complex audit reports and risk assessments to executive management and stakeholders entirely in English.

Benefits

• Comprehensive benefit package includes Medical, Dental and Vision Care.
• Life Insurance.
• 401(k).
• Paid Time Off.
• Holidays.
• Wellness Program.
• Paid parental leave and more.