Director Risk Management
SHI International
Director Risk Management
SHI International
IT solutions provider for hardware software
Since 1989, SHI International Corp. has helped organizations change the world through technology. We’ve grown every year since, and today we’re proud to be a $16 billion global provider of IT solutions and services.
Over 17,000 organizations worldwide rely on SHI’s concierge approach to help them solve what’s next. But the heartbeat of SHI is our employees – all 7,000 of them. If you join our team, you’ll enjoy:
Our commitment to diversity, as the largest minority- and woman-owned enterprise in the U.S.
Continuous professional growth and leadership opportunities.
Health, wellness, and financial benefits to offer peace of mind to you and your family.
World-class facilities and the technology you need to thrive – in our offices or yours.
Role Description
Enterprise Risk Management,RiskandControl Self-Assessment
Lead the development and maturing of theERMapproach, including risk assessments, risk taxonomy, andarticulating therisk appetite and tolerances.
Establish and embed a scalable Risk & Control Self-Assessment program to ensure risks are consistently identified, assessed, and mitigated.
Define and implement Key Risk Indicators for priority risks (e.g., third-party risk, anticorruption, privacy, information security, trade compliance, fraud, order-to-cash).
Introduce monitoring and testing practices to surface emerging risks and support timely escalation.
Governance & Escalation
Stand up and facilitate the Risk and Compliance Functional Steering Committee, creating a consistent forum for cross-functional alignment and decision-making.
Act as a central coordination point for material risk and compliance issues, supporting structured escalation, options analysis, and remediation tracking.
Establish clear reporting and escalation pathways to leadership,
Compliance Framework & Culture
Build and maintain a practical governance framework, including policies, standards, and procedures aligned to SHI’s operating model.
Partner with Legal and HR to strengthen Code of Conduct and ethics coverage.
Develop targeted, role-based training and communications.
Embed compliance considerations intoalloperational workflows.
Third-Party & Operational Risk
Design and mature third-party risk segmentation, due diligence, and lifecycle oversight.
Coordinate with InfoSec and Privacy on security and data protection requirements.
Partner with Operations and Finance to enhance controls around export compliance, channel integrity, and fraud risk.
Testing, Reporting & Enablement
Establish independent testing and assurance activities to validate control effectiveness and remediation.
Deliver clear, concise executive reporting focused on insights, trends, and priorities.
Help select, implement, and optimize risk and compliance tools, dashboards, and analytics over time.
Leadership
Build and develop a high-performing risk and compliance team as the function matures.
Promote a culture of accountability, practicality, and continuous improvement.
Behaviors and Competencies
Strategic Thinking:Analyze complex situations,anticipatefuture trends, and align and integrate strategies across departments or functions.
Leadership: Take ownership of complex initiatives, collaborate with others in decision-making processes, and drive team performance.
Business Acumen:Understand the business and right-size controls to support growth.
Communication:Effectively communicate information to diverse audiences,facilitateand mentor others ineffective communication.
Collaboration:Foster a collaborative environmentwith peers across theorganization.
Problem-Solving:Proactivelyidentifyand take ownership of complex problem-solving initiatives,initiatepreventative measures, collaborate with others to find solutions, and drive successful outcomes.
Ethics:Upholdintegrityand ethics across the organization.
Attention to Detail:Drivemultiple projects,maintaininga high levelof detail,identifyingerrors or inconsistenciesinwork, andensuringaccuracy across all tasks.
Risk Management:Evaluate the risk landscape andidentifypragmaticssolutions.
Continuous Improvement:Identify major areas for improvement, implement major changes, and support others in their continuous improvement efforts.
Skill Level Requirements
Lead thedevelopment and maturationof enterprise risk management and Risk & ControlSelf-Assessmentprograms.
Establish governance forums, escalation pathways, andexecutive levelreporting.
Define andmonitorKey Risk Indicators across priority risk areas (e.g.,third-party, anticorruption, privacy, security, trade, fraud,order-to-cash).
Build a practical compliance framework (policies, training, workflows) embedded into how the businessoperates.
Strengthenthird-partyand operational risk practices in partnership withcross-functionalteams.
Introduce monitoring, testing, and assurance tovalidatecontrol effectiveness.
Other Requirements
A senior risk and compliance professional already performing this role and ready to leave a lasting mark.
10+ years’ experience in enterprise risk, compliance, or internal controls withinTechnologyor IT resale is preferable.
Proven experience building or significantly maturing ERM, RCSA, and third-party risk programs.
Comfortable influencing across a matrix and engaging executive leadership.
Motivated by building, not maintaining—practical, commercial, and outcomes-focused.
Ability to travel–10%
SHI UK is an equal opportunity employer and does not discriminate on the basis of race, religion, gender, sexual orientation, national origin, age, disability, or any other legally protected status. We encourage applications from all qualified candidates and we are dedicated to providing a fair and accessible recruitment process.
Equal Employment Opportunity – M/F/Disability/Protected Veteran Status
IT solutions provider for hardware software
SHI International helps organizations manage technology by selecting, deploying, and managing IT across cybersecurity, cloud, and everyday hardware and software needs. It started in 1989 as a software reseller and pivoted in the early 2000s to include hardware after a large-scale laptop deployment, shaping it into a full-service IT provider. Today, it is a $16 billion global firm with over 7,000 employees and is the largest MWBE in the United States. The company grows through strategic acquisitions and focuses on emerging technologies such as generative AI and cybersecurity to expand its capabilities. Its goal is to deliver comprehensive IT solutions and services to customers while expanding its reach and staying close to evolving technology needs.
Explore more opportunities at SHI International