Director, Risk & Compliance

Job Description

Director, Risk & Compliance

Band 3 (Director) | Mumbai or Bangalore

Role Overview: We are seeking a Director to lead client delivery across our Risk and Compliance practice in Australia. Based in Melbourne, this role carries end-to-end ownership of engagement execution, leading multi-disciplinary teams on large-scale control testing, governance, and risk transformation programs for banking and financial services clients. The Director is accountable for delivery quality, client outcomes, commercial performance, and account growth, working directly with senior client stakeholders and the practice leadership team. The successful candidate will pair deep GRC domain expertise with the commercial judgement to grow the business and the delivery discipline to run complex, time-bound programs to plan.

Responsibilities:

• Own end-to-end delivery of control testing and assurance engagements, from process prioritisation through Design Effectiveness (DE) and Operating Effectiveness (OE) testing, control gap identification, and treatment planning
• Lead the onshore and offshore delivery structure, integrating quality assurance and quality checking so that all completed work meets the agreed QA/QC parameters
• Set and hold the delivery plan, sprint cadence, and completion criteria, managing effort, timelines, and workload allocation across the team
• Oversee control gap criticality assessment against the client's likelihood and impact matrix, and secure sign-off from control owners and first-line risk teams
• Ensure issues, treatment plans, and CSA outputs are documented in the client's GRC tooling such as ServiceNow, and reported at the value-chain level
• Act as the senior point of contact for client sponsors and executives, understanding their objectives, managing expectations, and leading governance and escalation forums
• Lead client engagements across governance, risk and compliance (GRC), internal audit, process reviews, and SOX 404 control testing
• Prepare and present leadership updates, synthesising delivery and risk data into a clear view of engagement health, findings, and recommendations
• Support business development and new-logo acquisition, shaping go-to-market positioning and expansion of existing client accounts
• Manage engagement budgets and commercial performance, and support proposals, methodology development, and capability materials
• Develop delivery methodologies and work programs that lift quality and strengthen the practice's value proposition
• Contribute to knowledge management, mentoring, and capability building across the practice
• Manage, coach, and develop delivery teams, guiding junior staff and coordinating cross-functional working
• Ensure delivery against agreed SLAs, KPIs, and quality metrics, including timely resolution of QA and QC defects

Qualifications:

• MBA, Post Graduate, or CA; additional credentials such as CIA, CS, or ICWA an advantage
• 15+ years in risk and compliance, internal audit, or enterprise and non-financial risk, including substantial client delivery leadership
• Deep expertise in GRC frameworks, control design and testing (DE and OE), SOX 404, and regulatory environments across banking and financial services
• Proven experience owning end-to-end delivery of large, complex programs to time, quality, and budget
• Track record of leading onshore and offshore teams and running QA and QC governance at scale
• Demonstrated ability to build client relationships, influence senior executives, and support business development and growth
• Strong commercial acumen, including engagement budgeting and proposal development
• Excellent written and verbal communication, with the ability to turn complex data into leadership-ready messages
• High standard of integrity and confidentiality
• Self-starter with strong planning, organisation, and time-management skills, comfortable prioritising across multiple engagements
• Experience with technology-enabled or new-age business models is an advantage
• Based in Melbourne, Australia, with flexibility to work under a hybrid model across client and Genpact locations