Director, Risk Management

The Director of Risk Management and Policy Development is responsible for the strategic development, implementation, and oversight of comprehensive, data-driven policy development and risk management strategies. This role integrates traditional policy frameworks with modern data analytics to enhance risk identification, training effectiveness, and compliance monitoring across the university. The Director ensures that policies align with institutional objectives, regulatory requirements, and best practices in enterprise risk management.

The Director serves as the primary owner of the Policy on Policy, ensuring adherence to best practices in policy governance. They advise departments and leadership on policy development, revision, and implementation, assessing impact and ensuring consistency across the university. Managing the full policy lifecycle, the Director oversees initiation, drafting, stakeholder engagement, review, approval, implementation, and periodic updates. Additionally, they maintain the university policy library, ensuring accessibility, organization, and version control, and develop a policy review schedule to keep policies current and aligned with evolving regulations, institutional priorities, and industry standards. In coordination with the Vice President for Enterprise Risk Services and the Executive Director for Risk Management and Insurance, the Director collaborates with University Communications and the Office of the Chief Operating Officer (COO) to develop and distribute policy announcements and facilitates outreach efforts to enhance university-wide understanding of policies and their implications.

In the realm of risk management and compliance, the Director develops and implements risk assessment and gap analysis methodologies to identify, analyze, and mitigate operational, compliance, and reputational risks across university functions. Working closely with department heads, they identify policy and compliance gaps, develop mitigation strategies, and implement necessary policy updates. The Director serves as the primary administrator for key administrative policies within the Enterprise Risk Services (ERS) department and monitors compliance with local, state, and federal regulations to ensure university policies align with legal and regulatory requirements. Additionally, they supervise the Training Manager, overseeing compliance training programs to ensure faculty, staff, and students are well-informed of institutional policies and legal obligations. Leveraging data analytics, the Director assesses the effectiveness of policies and risk management initiatives, using insights to inform strategic decision-making.

The Director plays a crucial role in stakeholder collaboration and strategic initiatives, working closely with department heads and academic units to foster a culture of compliance and risk awareness. They serve as a key member of enterprise risk committees, including the Governance Risk and Compliance Steering Committee, the ERM and Policy Steering Committee, and frequently presents at the Governance Risk and Compliance Executive Council. Engaging with ERS leadership, they facilitate the implementation of enterprise risk initiatives, ensuring alignment with institutional goals. The Director also leads the development and maintenance of a university policy website, ensuring that policies are easily accessible to the university community, and develops reports, dashboards, and insights to present to university leadership, enabling informed decision-making on risk and policy matters. 
 

Minimum Required Education and Experience

• Bachelor’s degree in risk management, business or related field.
• A minimum of ten (10) years of relevant experience in a large complex decentralized environment, to include three (3) years at the supervisory or managerial level.
• A minimum of five (5) years experience in risk management and policy development.

Preferred Qualifications

• Master’s degree in a relevant field is preferred.
• Experience working in a highly complex higher education setting is strongly preferred.
• Experience with HIPAA requirements
• Experience using compliance tracking software for regulatory compliance
• Experience with occupational accident investigation
• Experience with software development and implementation 

• Ability to develop, implement, and manage a program
• Ability to work with minimal oversight to achieve expected results
• Knowledge of occupational requirements (such as those defined by OSHA) pertaining to workplace healthcare requirements, medical surveillance, and medical screening
• Knowledge of OSHA recordkeeping and reporting requirements    
• Strong, effective communication skills with the ability to communicate effectively (verbally and in writing) in a professional environment with stakeholders to achieve goals and solicit input to continually approve the program
• Ability to maintain confidentiality of medical records
• Ability to motivate and direct people within and outside of the office 
• Ability to effectively manage material resources and operational fundingProficient in Microsoft Office Suite programs
• Ability to maintain organized digital file system
• Ability to collaborate with multiple parties and develop policies that guide operations and compliance 
• Broad understanding of occupational health and safety regulatory requirements beyond surveillance requirements