Climate & Environment Full-time

Risk Management and Compliance Lead

AECOM

Posted

Apr 02, 2026

Location

Remote

Type

Full-time

Mission

What you will drive

This role will be part of team that ensure the design, implementation, and evolution of a robust compliance and controls framework across GBS. This role is central to ensuring that Global Business Services operates in accordance with all relevant laws, regulations, and internal policies, including Sarbanes-Oxley (SOX). The ‘Risk Management and Compliance Lead’ will report to the ‘Head of Risk Management & Compliance - GBS’, partner with staff across all functional Finance and HR towers and align closely with GBS Project Teams to embed controls into transformation and digitization initiatives.

Risk Assessment and Mitigation

  • Perform GBS-wide compliance risk assessments and control mapping.
  • Partner with the business to prepare and maintain SOX narratives and control documentation for GBS processes and perform testing to ensure compliance.
  • Partner with staff across all functional Finance and HR towers to embed controls into standard processes and to ensure ongoing operational compliance.
  • Prepare regular reporting to advise the ‘Head of Risk Management & Compliance – GBS’ and the GPO/SDLs on risk mitigation actions and control execution gaps.

Training and Communication

  • Design and deliver training programs tailored to compliance requirements across all GBS towers.
  • Ensure consistent communication of policy updates and new control expectations across GBS teams.
  • Create compliance toolkits to support GBS coaching programs.

Auditing and Compliance Monitoring

  • Plan, perform and execute periodic compliance audits and self-assessments.
  • Oversee a self-testing program across all functional towers to proactively identify, remediate and track closure of control gaps before internal/external audits.
  • Support the tower teams on self-assessments findings, interpreting results and mitigation plans.
  • Track trends across self-testing outcomes and escalate systemic issues.
  • Monitor real-time compliance across all delivery hubs and flag emerging issues.
  • Partner with internal and external auditors to ensure compliance with relevant local regulatory requirements.

Change & Project Compliance Integration

  • Identify and implement changes that generate efficiencies and foster a culture of continuous improvement.
  • Participate in GBS-led projects (automations, transitions) to ensure compliance and control design from the start.
  • Review compliance frameworks for new tools and workflows.
  • Align with the ‘Head of Risk Management & Compliance – GBS’ to ensure process design changes meet compliance requirements.

 

 

Profile

What makes you a great fit

This role will be part of team that ensure the design, implementation, and evolution of a robust compliance and controls framework across GBS. This role is central to ensuring that Global Business Services operates in accordance with all relevant laws, regulations, and internal policies, including Sarbanes-Oxley (SOX). The ‘Risk Management and Compliance Lead’ will report to the ‘Head of Risk Management & Compliance - GBS’, partner with staff across all functional Finance and HR towers and align closely with GBS Project Teams to embed controls into transformation and digitization initiatives.

Risk Assessment and Mitigation

  • Perform GBS-wide compliance risk assessments and control mapping.
  • Partner with the business to prepare and maintain SOX narratives and control documentation for GBS processes and perform testing to ensure compliance.
  • Partner with staff across all functional Finance and HR towers to embed controls into standard processes and to ensure ongoing operational compliance.
  • Prepare regular reporting to advise the ‘Head of Risk Management & Compliance – GBS’ and the GPO/SDLs on risk mitigation actions and control execution gaps.

Training and Communication

  • Design and deliver training programs tailored to compliance requirements across all GBS towers.
  • Ensure consistent communication of policy updates and new control expectations across GBS teams.
  • Create compliance toolkits to support GBS coaching programs.

Auditing and Compliance Monitoring

  • Plan, perform and execute periodic compliance audits and self-assessments.
  • Oversee a self-testing program across all functional towers to proactively identify, remediate and track closure of control gaps before internal/external audits.
  • Support the tower teams on self-assessments findings, interpreting results and mitigation plans.
  • Track trends across self-testing outcomes and escalate systemic issues.
  • Monitor real-time compliance across all delivery hubs and flag emerging issues.
  • Partner with internal and external auditors to ensure compliance with relevant local regulatory requirements.

Change & Project Compliance Integration

  • Identify and implement changes that generate efficiencies and foster a culture of continuous improvement.
  • Participate in GBS-led projects (automations, transitions) to ensure compliance and control design from the start.
  • Review compliance frameworks for new tools and workflows.
  • Align with the ‘Head of Risk Management & Compliance – GBS’ to ensure process design changes meet compliance requirements.

 

 

About

Inside AECOM

Building sustainable legacies through innovative infrastructure and environmental solutions.