Senior Director, Enterprise Risk Management and Compliance

Overview

About Rice : Rice University is on a 300-acre campus in Houston, Texas, and is ranked among the nation’s top 20 universities by U.S. News & World Report. Rice has a 6-to-1 undergraduate student-to-faculty ratio and a residential college system that supports students through social events, intramural sports, student plays, lectures, courses and student government. Rice values responsibility, integrity, community and excellence.

Position Summary : The Senior Director, Enterprise Risk Management and Compliance contributes to the leadership of the ethics, compliance, and enterprise risk management program at Rice University. Reporting to the Associate Vice President, Ethics, Compliance and Enterprise Risk & Chief Compliance Officer, the position will support compliance with federal, state, and local laws, as well as university policies, while facilitating the highest ethical standards of conduct for Rice’s community of staff, students and faculty. The role will work closely with compliance partners across Rice to strengthen existing practices and will direct the continued implementation and development of the enterprise risk management strategy by designing and maintaining processes and capabilities to help the university manage its key enterprise-wide risks. The program is established by the Audit Committee of the Board of Trustees and carried out under the direction of the Vice President and General Counsel. The position will engage with all University processes, systems, and departments and interact regularly with all levels of management. This is a full-time, benefits eligible position. Exempt (salaried) positions under FLSA are not eligible for overtime.

Responsibilities

Direct implementation and development of the enterprise risk monitoring program, including joint risk assessments with Internal Audit to identify enterprise risks, analyze and quantify potential impact and likelihood of risks, and facilitate mitigation strategies.

Liaise directly with compliance and risk partners across academic and administrative units on compliance and higher education enterprise risk-related matters.

Prepare comprehensive written reports and presentations for stakeholders that may include the Executive Compliance Committee, senior university leadership, and the Audit Committee of the Board of Trustees regarding top institutional risks.

Collaborate with Internal Audit on an ongoing basis to provide risk information for key audit activities.

Conduct research on compliance and enterprise risk topics and emerging regulatory requirements in higher education, including cybersecurity, conflicts of interest, diversity, equity, and inclusion, data privacy, and research security, and stay current with best practices and trends in higher education.

Essential Functions

Direct implementation and development of the enterprise risk monitoring program, including joint risk assessments with Internal Audit to identify enterprise risks and mitigation strategies.

Engage with compliance and risk partners across university units on related matters.

Prepare reports and presentations for stakeholders such as the Executive Compliance Committee, senior leadership, and the Audit Committee regarding top institutional risks.

Collaborate with Internal Audit on risk information for key audit activities.

Research compliance and enterprise risk topics and emerging regulatory requirements in higher education.

Minimum Education Requirements

Bachelor’s degree (or foreign equivalent) in Business Administration, International Business or related field.

Minimum Experience Requirements

Eight (8) years of experience as a risk or compliance analyst in a legal, compliance, audit or enterprise risk environment, including experience with each of the following :

Conducting enterprise risk reviews across strategic, operational, financial, legal, compliance, cyber / IT, and environment, health and safety risks, and protocols to incorporate best practices.

Defining and carrying out internal compliance risk reviews and audits.

Familiarity with globally accepted ERM standards and guidelines (e.g., ISO 31000, COSO ERM).

Compliance and assurance services, including managing risks and opportunities for business transformation projects in higher education and addressing risks specific to data and research security, laboratory safety, grant management, international programs, and global partnerships.

Of the required eight (8) years of experience, at least five (5) years must include experience with each of the following :

Laws, regulations, and higher education industry standards (e.g., Clery Act, Title IX, FERPA, HIPAA, etc.).

Governance, Risk, and Compliance (GRC) software tools (e.g., Riskonnect, Archer, MetricStream, and / or LogicGate) to track and manage risks.

Designing and implementing risk appetite frameworks and risk tolerance metrics for higher education.

Risk analysis and data visualization tools (Tableau, PowerBI) to compile and present findings to senior university leadership.

Familiarity with Agile project methodology.

EEO and Contact

Rice University is committed to Equal Employment Opportunity and welcomes diversity. Qualified applicants are considered without regard to race, color, religion, age, sex, sexual orientation, gender identity, national or ethnic origin, genetic information, disability, or protected veteran status. Reasonable accommodations are available. For support during the application or hiring process, contact the Disability Resource Center at 713-348-5841 or adarice at rice.edu. For additional questions, please email jobs at rice.edu. Thank you for your interest in employment with Rice University.

#J-18808-Ljbffr