Head of Audit, Risk & Compliance

About the Role Navan seeks a Head of Audit, Risk & Compliance to architect and lead a unified governance ecosystem spanning Internal Audit, Enterprise Risk, and Regulatory Compliance, reporting to the CFO. This role builds a scalable, tech-forward framework to enable safe innovation and delivers independent assurance to the Audit Committee and Executive Management while partnering across Finance, Legal, Security, and Product. What You'll Do

• Architect the Global Strategy: Define and execute a unified, multi-year roadmap for Navan’s global Audit, Risk, and Compliance function, balancing rigorous public-company requirement with rapid business innovation.
• Lead Audit & SOX Governance: Own the end-to-end SOX and ICFR readiness strategy, while designing a risk-based internal audit plan that delivers actionable insights on control health to the Audit Committee.
• Master Regulatory & Risk Oversight: Own the global regulatory compliance roadmap—including fintech/travel-specific requirements, sanctions (OFAC), KYC/KYB, and trade pre-clearance.
• Modernize Compliance & Audit Operations: Drive tech-forward solutions, leveraging automation and data analytics to streamline third-party due diligence, banking/ABL reporting obligations, and internal control monitoring.
• Champion Accountability & Remediation: Partner cross-functionally with Finance, Legal, Security, and Product to embed intuitive compliance controls into business workflows and drive durable, root-cause remediation.
• Build & Influence: Recruit and scale an elite, multi-disciplinary team, serve as the primary advisor to the C-suite and Board on strategic risk and governance, and build a strong relationship with the Audit Committee Chair. What We're Looking For
• Proven Leadership Scale: 12+ years of progressive leadership experience spanning internal audit, SOX, enterprise risk, and compliance—ideally gained within high-growth technology, fintech, or complex public-company environments.
• Technical Mastery: Deep foundational knowledge of SOX/ICFR, risk management frameworks (COSO/ISO), regulatory/sanctions compliance (OFAC, KYC), international travel compliance, and ITGCs.
• SaaS & Tech Fluency: Experience auditing automated controls, cloud infrastructure, and data flows. You understand how technology impacts financial data integrity and how to leverage automation for efficiency.
• Operational Execution: A proven ability to translate complex regulatory requirements into clear, automated software workflows and efficient operational processes.
• Exceptional Executive Presence: A proven track record of distilling highly technical risk and governance concepts into strategic, actionable narratives for the C-suite.