Head of Risk, Compliance & SoD - EL

About This Role

Leading the unified Risk, Compliance & Segregation of Duties (RCS) function for EL IS is the core of this role, covering EL risk and compliance globally and SoD services across ABB Business Areas. This position acts as the single point of accountability for global SoD services, IT compliance, IS risk management, and digital regulatory compliance, enabling EL IS to sustain its regulatory “license to operate” while supporting digital strategy. The role defines the RCS strategy, governance, operating model, standards, tools, and reporting framework, transforming fragmented compliance and SoD activities into a scalable, follow-the-sun service model with strong audit readiness, regulatory compliance, and stakeholder confidence.

Responsibilities

• Integrate Risk & Compliance and Global SoD into one RCS organization under the EL IS Head of SRC
• Own the RCS TOM, service strategy, and roadmap, including follow-the-sun SoD and IS Compliance shared services
• Position RCS as the CoE for SoD, IS risk, IT compliance, and digital regulatory compliance
• Drive digital compliance strategy for GDPR, NIS 2.0, Export Controls, CRA, DORA, AI Act, and emerging regulations
• Deliver global SoD services across ABB Business Areas through AMEA, Europe, and Americas hubs
• Provide EL IS compliance shared services covering ITGC, SOX/ICoR, security controls, vendor compliance, and digital regulatory obligations
• Own SLAs, quality, budget, and delivery performance for compliance and SoD services
• Drive automation, UAM rationalization, tooling optimization, and vendor security evaluation processes
• Provide RCS dashboards, KPIs, compliance scorecards, and risk reporting to EL IS HEAD OF SRC, BA CIOs, and senior leadership
• Monitor SoD deficiencies, UAR completion, ICoR testing, audit findings, regulatory obligations, and remediation timelines
• Perform top-down IS risk assessments, business impact analysis, and mitigation planning
• Investigate critical incidents and drive root-cause-based corrective actions with a “no surprises” culture
• Govern the integrated RCS framework covering SoD, ICoR/ITGC, NIST, GDPR, NIS 2.0, CRA, DORA, AI Act, and Export Controls
• Lead GDPR, NIS 2.0, and Export Control compliance activities for applicable EL IS systems and entities
• Monitor regulatory changes and embed new digital compliance requirements into systems, projects, and services
• Build compliance capability through training, standards, and stakeholder guidance
• Lead internal and external audit readiness, engagement, findings management, and sustainable remediation
• Establish global RCS processes and operating standards across regional hubs
• Collaborate with GBS IS, SAP CoE, Trade Compliance, Privacy Office, and BA IT to deliver integrated compliance processes