Vice President, Head of Audit & Risk Management

• Develop and execute a comprehensive, risk-based Internal Audit strategy aligned with Gilead's strategic priorities, operating environment and evolving enterprise risk profile.
• Lead the annual audit planning and risk assessment process, maintaining the flexibility to adjust audit priorities as business conditions and emerging risks evolve.
• Provide independent assurance across financial, operational, commercial, compliance and technology-related risks and controls, including areas such as cybersecurity, data, supply chain and manufacturing.
• Evaluate the effectiveness of governance, risk management, internal controls and key business processes and provide practical, actionable recommendations that strengthen the organization while enabling the business.
• Oversee the execution and quality of audits across Gilead's global operations and affiliates and ensure significant findings and remediation plans are appropriately tracked and communicated.
• Maintain appropriate coordination with external auditors and other assurance and compliance functions to ensure effective coverage of enterprise risks and minimize unnecessary duplication.

• Lead Gilead's enterprise risk management framework and associated governance processes, ensuring a comprehensive and forward-looking view of the company's principal and emerging risks, including cybersecurity, AI and other rapidly evolving areas of enterprise risk.
• Facilitate enterprise risk identification and assessment across the organization, partnering with senior leaders and risk owners to evaluate risk exposure, mitigation strategies and changes in the business and external environment.
• Provide an integrated view of enterprise risk to senior management and the Audit Committee, identifying themes, interdependencies and emerging issues that warrant leadership attention.
• Continue evolving the company's risk management approach toward more dynamic and continuous risk monitoring, leveraging data and technology to identify changes in risk indicators earlier.

• Set the vision and roadmap for the continued modernization of Internal Audit and risk management, building on the organization's existing foundation while identifying opportunities to adopt leading practices.
• Accelerate the use of technology, data analytics, automation and AI across the audit lifecycle, including risk assessment, planning, testing, monitoring and reporting.
• Partner with technology, cybersecurity and business leaders as Gilead expands its use of AI and other emerging technologies, ensuring that related risks, governance and controls are appropriately incorporated into the company's audit and enterprise risk frameworks.

Business Continuity Management (BCM)

Business Continuity Management (BCM) lead the development, implementation, and maintenance of the overarching Business Continuity Management framework, policies, and resilience strategies. Responsibilities include:

• Business Impact Analysis (BIA): Lead organization-wide BIAs to identify critical business processes, operational dependencies, and recovery time/point objectives.
• Plan Development: Oversee the creation and regular updating of Business Continuity Plans (BCP) and technical Disaster Recovery (DR) strategies in partnership with IT and department heads.
• Testing & Simulation: Design and facilitate tabletop exercises, functional drills, and full-scale disaster simulations to validate readiness and uncover gaps.

• Serve as a principal advisor to the Audit Committee on Internal Audit and enterprise risk management matters, providing clear, independent perspectives on significant risks, audit findings, control matters and remediation progress.
• Maintain direct and effective communication with the Audit Committee and ensure the function has the independence, access and authority necessary to fulfill its responsibilities.
• Develop trusted relationships with the CEO, CFO and senior leadership team, communicating significant and emerging issues early and translating complex risk matters into clear, decision-relevant insights.
• Provide regular updates to Gilead's senior leadership on the enterprise risk landscape and help facilitate thoughtful discussion of emerging risks and mitigation priorities.
• Balance independence and professional skepticism with a collaborative, pragmatic approach that enables Internal Audit and risk management to serve as valued partners to the business.

• Lead, develop and mentor Gilead's global Audit & Risk Management organization, fostering a culture of integrity, intellectual curiosity, accountability, collaboration and continuous improvement.
• Cultivate a high-performing audit and risk function, leveraging audit, risk, technology, analytics, and business expertise to support Gilead's evolving needs.
• Develop emerging leaders and strengthen succession planning while creating opportunities for team members to broaden their experience and impact across the organization.
• Build a technology-forward mindset across the team and ensure professionals are developing the skills required for an increasingly data-driven, AI-enabled audit and risk environment.
• Establish clear priorities and performance expectations while maintaining the agility to deploy resources toward Gilead's most significant and rapidly evolving risks.

The successful candidate will be a seasoned Internal Audit and risk management executive with significant experience operating within a complex, global public company. They will bring broad expertise across internal audit, enterprise risk management, governance, internal controls and compliance, coupled with strong business acumen and a demonstrated ability to translate enterprise risks into practical, actionable insights. The ideal candidate will have a track record of leading a sophisticated audit and risk organization while advancing the function through technology, data analytics, automation and AI-enabled capabilities.

Gilead is seeking a forward-thinking leader who is intellectually curious and energized by the opportunity to continue evolving how Internal Audit and risk management support the enterprise. This individual will bring a progressive perspective on the future of the function, including the use of technology, data analytics, automation and AI to enhance audit effectiveness, enable more continuous risk monitoring and identify emerging issues earlier. They will be comfortable challenging established ways of working while thoughtfully building on the strengths of an experienced organization.

The Vice President, Head of Audit & Risk Management will be a highly credible and collaborative enterprise leader who combines independence and professional judgment with a pragmatic, business-oriented approach. They will have the executive presence and communication skills to establish trusted relationships with the Chief Executive Officer, Chief Financial Officer, senior leadership team and Audit Committee, translating complex audit and risk matters into clear perspectives at the appropriate level of detail. The individual will be equally effective engaging deeply with business and functional leaders across the organization while maintaining the independence and objectivity required of the Internal Audit function.

The successful candidate will also be an engaging people leader with a demonstrated commitment to developing high-performing teams and creating opportunities for talent to grow. They will lead a team of 25 professionals, fostering a collaborative and inclusive environment while continuing to build capabilities across technology, data analytics, AI and emerging areas of risk. This leader will bring the team along in the continued evolution of the function, encouraging new ways of working while building on the expertise and strong foundation already in place.

The ideal candidate will have experience within the following areas:

• 15+ years of progressive experience across Internal Audit, enterprise risk management, public accounting, finance, controls and/or related disciplines within complex, global organizations.
• Significant experience leading a global internal audit function for a publicly traded multinational company.
• Broad expertise across risk-based internal audit, enterprise risk management, governance, internal controls, SOX, compliance, operational risk and technology risk.
• Demonstrated experience owning or meaningfully leading enterprise risk management and risk governance, including identifying and assessing emerging risks and effectively communicating the enterprise risk profile to senior leadership and the Board.
• Demonstrated success modernizing Internal Audit and risk management through technology, advanced analytics, automation, continuous auditing and AI-enabled capabilities.
• Experience navigating complex, highly regulated operating environments; pharmaceutical or life sciences experience is valued but not required.
• Experience assessing risks across a broad operating environment, including commercial activities, technology and cybersecurity, supply chain, manufacturing and other enterprise processes.
• Strong understanding of professional Internal Audit standards and public-company governance and control requirements.
• Proven ability to lead, develop and mentor high-performing teams while building organizational capability and developing future leaders.
• Significant experience interacting with Audit Committees and Boards of Directors, with the executive presence, judgment and communication skills to engage credibly with the CEO and other senior executives.
• Bachelor's degree in Accounting, Finance, Business or a related discipline; CPA, CIA, CISA and/or an advanced degree is preferred.