Senior Manager, Enterprise Risk Management

The Senior Manager of Enterprise Risk Management will mature and integrate a scalable risk framework that empowers safe innovation. This individual will oversee the enterprise risk function. The enterprise risk function helps the company understand and manage the most important risks and partner with management to make thoughtful decisions about the risks we take in pursuit of our strategy. You will partner across Product, Operations, Finance, Legal, Treasury, and Security to balance risk management considerations with Navan’s fast-paced growth. This role reports to the Head of Audit, Risk & Compliance.

What You’ll Do:

• Evolve the Risk Framework: Develop enterprise risk assessments, risk appetite, risk taxonomy, governance standards, escalation protocols, risk mitigation plans, ensuring the framework is aligned with business strategy, global growth priorities, and emerging risks.
• Enable Fast, Safe Growth: Oversee risk-informed change governance for new products, markets, and major system changes, ensuring governance supports business velocity while maintaining effective standards and clear accountability.
• Conduct Risk Assessments: Assess risks across the business including areas such as fraud, revenue, procurement, investments, privacy, compliance, and corporate development.
• Drive Risk Documentation, Analytics & Reporting: Evolve a centralized risk management documentation framework and track key risk indicators through robust data analytics and executive dashboard development to monitor enterprise risk health.
• Drive Innovation: Advance the risk management function through automation, continuous monitoring, and AI-enabled techniques.
• Champion a Risk-Aware Culture: Drive a consistent adoption of enterprise risk standards, reinforcing first line ownership, and promoting risk management as a shared responsibility.
• Cross-functional Development: Partner closely with Product, Operations, Finance, Legal, Treasury, Security and Product teams to support Navan’s next phase of scale.

What We’re Looking For:

• Proven Leadership Scale: 10+ years of progressive experience in risk management, operational risk, enterprise risk, compliance, controls or internal audit ideally gained within fintech, banking, or complex public-company environments. At least 5+ years leading enterprise risk management or operational risk.
• Technical Mastery: Deep foundational knowledge of risk management frameworks (COSO/ISO) and the three-lines-of-defense model.
• Strong Judgment: Experience designing the right level of control in a fast-scaling company, including where guardrails are sufficient, where formal ICFR/SOX controls are required and where automation or monitoring is the better answer.
• Strong Experience: A proven ability to build risk management frameworks, governance models, oversight programs, and deep expertise in administration of a risk management platform tool, Optro.
• Demonstrated Ability: Experience defining and operationalizing risk appetite, policies, metrics, and escalation processes that support business growth while maintaining effective control standards.
• Effective Partner: Demonstrated ability to partner effectively with operational, finance, legal, people, procurement, corporate development, and technical teams, including stakeholders who may initially view controls as slowing them down.
• Excellent Communication Skills: A proven track record to develop and deliver clear, concise reporting to senior management, the risk committee, and other governance forums. Demonstrated experience preparing risk papers and communicating effectively with senior management. 

Education, Credentials & Background: We value exceptional capability, rigorous analytical skills, and proven outcomes above specific degree labels. A Bachelor’s degree in accounting, finance, business, or a related field provides a strong foundation.

Active professional certifications (e.g., CPA, CIA, CISA, CRM) or an advanced degree (MBA/JD) are highly valued as evidence of technical expertise, but equivalent real-world mastery in fintech or tech-company governance is equally prioritized.