The VP Chief Risk, Compliance & Privacy Officer leads the Company’s enterprise risk management program. This role reports directly to the EVP and Chief Financial Officer and has responsibilities that include, but are not limited to the following:

• Lead the Enterprise Risk Management (ERM) program and provide direction for activities to assess and mitigate significant competitive, regulatory, and technological threats and risks that may adversely affect the company’s ability to achieve its strategic, financial, compliance and internal goals.
• Establish company’s ERM strategy, risk management framework and policies to assist senior management with risk management
• Manage the ERM staff of two full-time professionals
• Lead the development, maturation and ongoing assessment of Kelly’s global data privacy compliance strategy and the key execution components thereof
• Build strong relationships with Kelly leaders across the enterprise; develop detailed understanding of the issues, challenges, opportunities and risks that exist within various groups.
• Partner with the General Counsel for guidance on interpretation of regulatory requirements and legal advice on issues, concerns and risks
• Partner with Internal Audit for review and assessment of potential or actual risks, conducting audits and/or other projects
• Partner with IT to stay aligned on the latest technology threats and opportunities to mitigate
• Partner with Risk Management staff to ensure appropriate insurance coverage, consultative advice and contract reviews concerning key organizational risks. Collaborate with legislative implementation staff in the Service and Law divisions, to ensure Kelly implements timely and compliant responses to new legislative and regulatory obligations
• Execute strategic oversight of the company’s entire risk management focus and ensure a culture of integrity and transparency. Develop and reinforce a risk-aware culture that owns risks within its operations and where managing risk is everyone’s responsibility
• Strike a balance for the company between engaging in value-creating activities versus value preservation controls (risk and reward) through decision-making and risk appetite formulation; balance risks with financial, investment, insurance, personnel and inventory decisions to obtain an optimum level for stakeholders and define and sustain the company’s “risk profile”
• Identify potential threats to the operational efficiency and financial stability of the company and recognize potential threats to the company’s reputation
• Ensure the organization is in compliance with applicable regulatory and legislative requirements; identify potential areas of compliance risk; develop and implement corrective action plans and/or policies for resolution of relevant issues; and provide guidance on how to avoid or deal with similar situations in the future
• Oversee the preparation and maintenance of internal and external gathering of information necessary for conducting risk assessment and analysis
• Deliver regular risk analysis reports to senior leadership and the Audit Committee of the Board of Directors including actionable plans for avoiding or preventing threats at all levels
• Has regular access to the Board of Directors for conveyance and reporting
• Consult with the field and management regarding business opportunity risk issues, Design and implement methods for avoiding potential threats using available risk metric software and personal knowledge of the industry
• Monitor the industry for developing trends and proactively advise senior management on emerging issues and trends that are most relevant to the company’s evolving organization
• Develop and maintain a reporting structure to handle employee concerns regarding known or suspected policy violations and ensure that all reports are appropriately investigated, including tracking and resolution of each reported instance
• Ensure the proper integration of risk concepts into the corporate strategic plan
• Serve as a liaison to regulatory bodies for matters relating to privacy and security
• Assume responsibility for management of cyber breaches and related events, including appropriate preparation and documentation as well as event response and management
• Be prepared to serve as Kelly’s Data Protection Officer if so designated
• Oversee the delivery of compliance and privacy training and orientation to all employees
• Oversee development of key privacy compliance documentation such as data protection impact assessments and privacy statements
• Ensure appropriate risk management practices across Kelly’s supply chain, including staffing providers, IT vendors and other suppliers
• Administer, manage and improve Kelly’s compliance micro-governance program
• Collaborate with leaders of Kelly’s corporate social responsibility programs to ensure that key needs and issues are shared across the ERM and CSR realms
• Support corporate communication and messaging activity across ERM subject matters