Head of Risk Management

Head of Risk Management & Compliance - GBS

AECOM, Taguig, National Capital Region, Philippines

This role will lead the design, implementation, and evolution of a robust compliance and controls framework across GBS. This role is central to ensuring that Global Business Services operates in accordance with all relevant laws, regulations, and internal policies, including Sarbanes-Oxley (SOX). The Head of Risk Management & Compliance will directly support the Global Process Owner (GPO) for Record to Analyze, partner with Service Delivery Leads (SDLs) across all functional Finance and HR towers, and align closely with GBS Project Teams to embed controls into transformation and digitization initiatives. The role is responsible for building and managing a high-performing compliance team across the GBS hubs.

• Lead GBS-wide compliance risk assessments and control mapping.
• Develop, maintain, and evolve SOX narratives and control documentation for GBS processes.
• Partner with GPOs to embed controls into standard processes and with SDLs to ensure ongoing operational compliance.
• Advise SDLs on risk mitigation actions and control execution gaps.
• Design and deliver training programs tailored to compliance requirements across all GBS towers.
• Ensure consistent communication of policy updates and new control expectations across GBS teams.
• Create compliance toolkits to support SDLs in coaching their teams.
• Lead the planning and execution of periodic compliance audits and self-assessments.
• Implement a structured self-testing program across all functional towers to proactively identify and remediate control gaps before audits.
• Train SDLs and tower teams on executing periodic self-assessments and interpreting results.
• Track trends across self-testing outcomes and escalate systemic issues to GPOs and senior GBS leadership.
• Monitor real-time compliance across all delivery hubs and flag emerging issues.
• Coordinate remediation efforts with SDLs and track closure of compliance gaps.
• Ensure new projects (automation, transitions) have built-in compliance checkpoints by working with Project Teams.
• Partner with internal and external auditors to ensure compliance with relevant local regulatory requirements.
• Ensure all GBS-led projects include compliance and control design from the start and review/approve compliance frameworks for new tools and workflows.
• Align process design changes with compliance requirements and with the GPO.
• Build and lead a globally distributed compliance team; set performance objectives aligned to GBS goals; foster a strong compliance culture through coaching, recognition, and development.

• CPA or equivalent professional accounting qualification.
• Minimum 10 years of experience, with at least 5 years in a global organization.
• Deep expertise in SOX and operational compliance in shared services.
• Strong leadership, communication, and stakeholder management skills.
• Demonstrated success in cross-cultural, virtual team environments.
• Flexible on location but preferably based in one of our GBS hub locations: Bangalore, Bucharest, or Manila.

AECOM is a global infrastructure leader delivering projects that create a positive and tangible impact. We offer comprehensive benefits and a work environment focused on growth, collaboration, and respect. AECOM is an Equal Opportunity Employer; all information will be kept confidential according to EEO guidelines.

ReqID: J • Business Line: Geography OH • Business Group: DCS • Strategic Business Unit: GBS • Career Area: Finance • Work Location Model: Hybrid • Legal Entity: AECOM Global Business Services - Philippines ROHQ