Role Purpose:
Reporting to the Vice President, Risk & Compliance, the Senior Manager/ Director, Risk & Compliance is responsible for helping design / establish a robust risk and compliance framework for Global Controllership including leading the advisory / maintenance for Global Finance Operations (GFO). The framework should ensure that all enterprise-wide accounting compliance programs, processes and technologies are consistent with NBCUniversal’s policies and procedures as well as applicable laws and regulations. Our GFO model today encompasses three service towers; Accounts Payable, Order to Cash, and Record to Report and has ~100 FTE NBCU team members supported by ~350 FTE in offshore locations. Services are provided to a wide range of business groups in a large number of countries.
While having the ground floor opportunity of bridging a multi-year S/4 finance transformation implementation with a post go-live compliance and advisory function, this role provides leadership in Security, Risk, and Controls (SRC) activities including process-level risks and developing / maintaining a company-wide Risk & Control Matrix (RCM). The Senior Manager / Director partners closely with the S/4 project team, Global Controllership across GFO, Corporate, and Business Units; Operations & Technology (O&T); and various compliance groups to ensure risks are identified, mitigated, and appropriately controlled within an evolving financial systems landscape.
Here You Will:
Design
- Build and support the design and maintenance of a company-wide Global Controllership and GFO risk, compliance, and control framework which includes the identification of risks, appropriate controls, and ensures that robust monitoring & reporting is in place.
- Ensure that the risk, compliance, and control framework meets all internal and external requirements and is tested regularly against external best practice.
- Help design and implement effective controls to mitigate SoD risk ensuring they are practical, sustainable, and auditable.
Establish / Maintain
- Help maintain efficient and effective governance structures internal to NBCU and with offshore partner which has regular cadence, clear accountabilities and is focused on ongoing improvements and reducing risk and control gaps.
- Work with the GFO team and offshore partner to maintain a quality mindset, ensuring that goals, objectives, and SLA’s reflect Risk and Compliance deliverables.
- Develop, maintain, and govern the Risk Control Matrix (RCM) for S/4 and finance-related boundary systems and consolidate with GFO RCM to ensure consistency and efficiencies.
- Ensure key risks and controls are effective, clearly documented, tested, embedded in the business, and updated as people, processes & technology change / evolve.
- Align the RCM with financial reporting, operational, and compliance requirements (e.g., SOX).
- Establish a plan to maintain NBCU company-wide control framework post go-live including Governance Risk Compliance (GRC) tool evaluation and implementation.
- Perform risk assessment and develop compliance approach to help ensure processes and controls are operating effectively.
Manage
- Responsible for managing annual cycles and participating in all routine and exceptional Risk and Compliance governance forums.
- Support and help guide the operational teams and offshore partner to successfully meet internal and external audit requirements, providing effective training, education, peer review and expert advice as required.
Policies & Procedures
- Ensure that the risk, compliance, and control framework is updated to reflect external regulatory and fiscal changes as well as internal policies and procedures.
- Develop and maintain accurate operational procedures.
People
- Establish relationships and appropriate cadence with key stakeholders to include but not limited to Enterprise finance compliance teams, external and internal audit groups, company-wide legal compliance groups as well as IT, Cyber, Fraud Prevention & Business Process Excellence, Sustainability, Global Controllership, and Sourcing stakeholder groups as required.
Performance
- Help set and track risk, compliance, and control performance targets and Service Level Agreement thresholds
- Perform Risk Assessment, SOX / Internal Audit Readiness reviews, control rationalization, and remediation plan design for Global Controllership / GFO business, compliance, and IT related areas.
- Drive continuous improvement in risk awareness, control design, and documentation quality and utilize Artificial Intelligence (AI) and continuous control monitoring as applicable.
Technology
- In partnership with the GFO Service Delivery Leads, Global Process Owners, and the Financial Technology Strategy Group, establish an appropriate risk, control and compliance approach which is robust but is adaptable to new technologies and use of Artificial Intelligence (AI) internally and provided by offshore partner / third party applications