Senior Director, Procurement Governance, Risk & Compliance

About the role

The Senior Director, Procurement Governance, Risk & Compliance leads the enterprise procurement governance and third-party risk capabilities that protect Equinix from regulatory, customer, operational, and reputational exposure across the supplier ecosystem.

Responsibilities

• Own and evolve the procurement governance framework including policies, standards, decision rights, control registers, and operating cadence to ensure consistent global execution and auditability
• Support Third-Party Risk Management (TPRM) / Know Your Supplier (KYS) program strategy and operations, including risk tiering, due diligence, contractual risk controls, ongoing monitoring, issue management, and exit/termination readiness for critical and high-risk suppliers
• Establish regulatory readiness for procurement and supplier risk, translating emerging requirements (e.g., DORA, NIS2, CSRD, CSDDD and other regional obligations) into actionable procurement policies, standards, controls, and evidence artifacts
• Provide executive-level risk visibility through KPIs/KRIs, dashboards, risk themes, concentration and dependency analysis, exceptions/acceptance tracking, and remediation progress reporting
• Partner with Legal and Compliance to drive required supplier contract template updates, support negotiation of key risk clauses (e.g., audit, subcontracting, data protection, resiliency, termination), and ensure alignment between contractual commitments and operational capability
• Own supplier audit and inquiry governance (customer, regulator, internal audit), ensuring requests are appropriately screened, routed, and supported with compliant evidence, and representing procurement in audits, investigations, and escalations as required
• Integrate ESG, sustainability, and responsible sourcing risk into supplier governance, including supplier decarbonization engagement, Scope 3-related supplier data governance, human rights and modern slavery due diligence, responsible sourcing, and ongoing ESG risk monitoring in coordination with Sustainability stakeholders
• Drive continuous improvement and automation of governance and risk workflows, partnering with procurement operations, systems/COE, and IT to reduce cycle time, increase adoption, and improve data quality and control effectiveness
• Lead and develop a high-performing global team across governance, risk, and resilience capabilities, ensuring clear accountability, scalable processes, and succession depth
• Serve as a trusted cross-functional leader, influencing stakeholders across Operations, Security, Finance, and Business Units, and representing Equinix with auditors, regulators, customers, and external partners as appropriate

Qualifications

• Deep, progressive experience in procurement governance, third-party risk management, supply chain risk, compliance, audit, or related disciplines within a complex global enterprise
• Demonstrated experience designing and operating scalable governance frameworks (policies, standards, controls, control registers) with measurable oversight and audit readiness
• Proven ability to translate regulatory and customer contractual requirements into implementable controls and evidence that withstands audit/regulatory scrutiny
• Strong cross-functional leadership and stakeholder management skills; ability to influence without authority across Legal, Compliance, Security, Finance, Operations, and business teams
• Experience supporting regulated industries (e.g., financial services, critical infrastructure, technology) and navigating regulatory expectations related to operational resilience and third-party oversight (e.g., DORA, NIS2 or similar)
• Familiarity with ESG/sustainability supplier programs (e.g., Scope 3 supplier engagement, human rights due diligence, responsible sourcing) and integrating ESG risk into supplier governance
• Experience working with GRC/TPRM tooling (e.g., risk assessment workflows, evidence management, control testing) and partnering with IT to automate controls and reporting
• Bachelor’s degree required (Business, Supply Chain, Risk, Finance, Law, or related field) or equivalent experience

Preferred Qualifications

• Experience supporting regulated industries (e.g., financial services, critical infrastructure, technology) and navigating regulatory expectations related to operational resilience and third-party oversight (e.g., DORA, NIS2 or similar)
• Familiarity with ESG/sustainability supplier programs (e.g., Scope 3 supplier engagement, human rights due diligence, responsible sourcing) and integrating ESG risk into supplier governance
• Experience working with GRC/TPRM tooling (e.g., risk assessment workflows, evidence management, control testing) and partnering with IT to automate controls and reporting

Leadership Competencies

• Enterprise mindset: Connects supplier governance decisions to business outcomes, resilience, and risk appetite
• Judgment and courage: Escalates and drives resolution on material risks; sets clear decision rights and holds teams accountable
• Influence and collaboration: Builds trusted partnerships across functions and regions; aligns stakeholders through data and clarity
• Operational rigor: Establishes repeatable processes, measurable controls, and a disciplined operating cadence
• Executive communication: Synthesizes complex risk and regulatory topics into crisp, decision-forcing insights for senior leaders
• Talent builder: Develops leaders, builds bench strength, and creates scalable team structures

Success Measures (First 12–18 Months)

• TPRM/KYS framework operating at scale with clear tiering, lifecycle controls, and timely completion of due diligence and reassessments for critical/high-risk suppliers
• Procurement governance artifacts (policies, standards, control registers) refreshed, socialized, and adopted with measurable control effectiveness and reduced exception volume
• Regulatory readiness: procurement obligations translated into implementable controls with audit-ready evidence; positive outcomes in customer, internal, and regulatory audits
• Executive visibility: routine reporting of risk themes, concentration exposure, remediation aging, and risk acceptance decisions; clear escalation paths and decision forums
• Reduced cycle time and friction in governance workflows through targeted automation and improved data quality in procurement and risk systems
• Clear accountability, strong engagement, and continuity through talent development and succession depth