Senior Manager, Internal Controls

The Senior Manager, Internal Controls leads FormFactor’s global internal controls, Sarbanes-Oxley compliance, and internal audit programs. The position is responsible for assessing financial, operational, compliance, and information technology risks; evaluating the effectiveness of related controls; and providing practical recommendations that strengthen the Company’s control environment and business processes. 

This role reports administratively through the Finance function and has a direct reporting line to the Audit Committee Chair. The Senior Manager works closely with the Audit Committee, executive leadership, external auditors, and leaders across Finance, Information Technology, Operations, Supply Chain, Engineering, Human Resources, and other business functions. 

Operating within a complex, global semiconductor manufacturing environment, the Senior Manager helps safeguard Company assets, support reliable financial reporting and regulatory compliance, improve operational effectiveness, and manage business risk. The position also serves as a risk and controls advisor for acquisitions, manufacturing expansion, automation, new technology introductions, and enterprise system implementations. 

KEY RESPONSIBILITIES 

SOX Compliance and Financial Controls 

• Lead the Company’s global Sarbanes-Oxley compliance program, including annual planning, risk assessment, scoping, documentation, testing, deficiency evaluation, remediation, and certification. 

• Partner with Finance, Information Technology, and business process owners to maintain effective internal controls over financial reporting. 

• Establish clear accountability for control ownership, execution, documentation, and remediation. 

• Coordinate with internal stakeholders and external auditors to support effective and efficient audit execution. 

• Evaluate control deficiencies, advise process owners on sustainable corrective actions, and monitor remediation through completion. 

• Monitor relevant regulatory and professional developments and assess their impact on the Company’s control environment. 

• Provide quarterly SOX compliance and internal controls updates to executive leadership and the Audit Committee. 

Operational Audits and Process Improvement 

• Develop and execute a risk-based internal audit plan covering financial, operational, compliance, and information technology risks. 

• Conduct audits and advisory reviews across areas such as inventory management, production planning, engineering change control, procurement, warehouse operations, asset management, accounting operations, and information technology. 

• Evaluate the design and effectiveness of business processes and controls, identify root causes, and recommend practical improvements. 

• Communicate audit results to business leaders, executive leadership, and the Audit Committee, including the associated risks and agreed-upon corrective actions. 

• Monitor remediation activities and report the status of significant findings through completion. 

• Identify recurring or enterprise-wide issues and recommend improvements to strengthen governance, controls, and operational effectiveness. 

• Maintain the independence, objectivity, and credibility of the internal audit function. 

Enterprise Risk Management 

• Lead or facilitate enterprise risk assessments, including the identification, evaluation, prioritization, and monitoring of significant business risks. 

• Partner with business and functional leaders to establish risk mitigation plans with clear ownership and accountability. 

• Develop risk reports and dashboards that support leadership and Audit Committee oversight. 

• Monitor significant risk mitigation activities and assess whether corrective actions appropriately address identified risks. 

• Support the integration of risk considerations into strategic planning and significant business decisions. 

Leadership & Organizational Development 

• Lead and develop the internal controls and internal audit team. 

• Establish departmental objectives, priorities, operating practices, and performance expectations. 

• Recruit, coach, and develop team members while building the capabilities needed to support the Company’s evolving risk environment. 

• Maintain appropriate development, succession, and knowledge-retention plans. 

• Build effective relationships across functions, business units, and geographic locations. 

• Manage external resources and service providers, as applicable.