Senior Director Procurement - Governance and Policy

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We’re also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

Get to know the business

Our Global Sourcing & Procurement Services (GS&PS) colleagues manage all AIG third party spend, ensuring maximized productivity and quality. Our global team includes Category Strategy, Negotiations and Execution, Transformation, Operations, Productivity, Environmental Sustainability, Supplier Diversity, Analytics, Tools, and Program Governance. GS&PS is committed to providing value to our stakeholders through building trust, providing a best-in-class procurement experience, maximizing profit, minimizing risk, and enabling sustainable growth for AIG.

About the role

The Senior Director of Governance and Policy is a strategic enterprise leader responsible for designing and operating the governance, policy, and control framework that enables AIG to manage third‑party relationships securely, compliantly, and efficiently throughout the full lifecycle—from sourcing through off‑boarding.

This role establishes the strategic foundation, operational model, and controls that embed risk, data security, and compliance considerations into every stage of vendor engagement. The Senior Director partners with senior stakeholders across Legal, Cybersecurity, ERM, Risk, Compliance, and GS&PS to ensure a resilient control environment, strong policy discipline, and consistent lifecycle management across the global supply base.

Responsibilities

Strategic Governance & Operating Model Leadership

• Establish and lead a federated governance model with centralized oversight, clearly defined roles and responsibilities (RACI), and strong cross‑functional accountability.

• Develop the governance framework supporting transparent, data‑driven decisions across third‑party lifecycle management.

• Define and lead KPIs, performance dashboards, and risk metrics that drive discipline, early‑warning visibility, and continuous improvement.

• Advise senior leadership on governance best practices, regulatory expectations, and emerging operational risks.

Policy Strategy, Standards & Control Framework

• Own the GS&PS policy and standards framework, ensuring alignment with enterprise policies, regulatory expectations, and contractual requirements.

• Formalize and embed third‑party data protection, cybersecurity, and operational control requirements into sourcing, contracting, supplier onboarding, and ongoing vendor management.

• Lead policy lifecycle management—including drafting, review, approvals, version control, training, and enterprise‑wide communication.

• Build and deliver training and awareness programs that elevate risk, data security, and policy understanding across business and procurement teams.

Process Optimization, Standardization & Automation

• Champion operational excellence using Lean Six Sigma, business process management (BPM), and automation opportunities.

• Design and implement scalable, efficient processes that embed controls and compliance expectations into frontline procurement activities.

• Lead change management, training, and adoption programs to ensure new processes and technologies deliver intended outcomes.

• Monitor adherence to approved processes and drive continuous refinement based on performance data, audit findings, and regulatory changes.

Audit, Regulatory Alignment & Executive Engagement

• Serve as the primary GS&PS leader for audit readiness, regulatory exams, and internal/external reviews involving third‑party governance and controls.

• Ensure timely and accurate fulfillment of requests and execution of remediation plans.

• Communicate complex governance, risk, and policy topics clearly for executive and board‑level audiences.

• Provide strategic thought leadership and influence to shape enterprise decision‑making related to third‑party risks, security, and operational resiliency.

Requirements

• Bachelor’s degree in Business, Supply Chain, Risk, Cybersecurity, or related field; Master’s degree, JD, or advance