Director of Compliance and Enterprise Risk Management

The Community Solution Education System

About The Position

The Director of Enterprise Risk Management (ERM) and Compliance provides enterprise-level leadership, governance oversight, coordination, and strategic guidance for the System’s risk and compliance framework. The position develops and maintains the System-wide Enterprise Risk Management (ERM) program, methodologies, governance processes, and reporting practices that support informed decision-making, organizational resilience, and Board oversight. The Director serves as a strategic advisor to executive leadership by monitoring the evolving regulatory and risk landscape facilitating enterprise risk assessments, providing executive level reporting and analysis, and promoting consistent risk management practices across the System. Operational responsibility for identifying, assessing, mitigating, and managing risks remains with the institutional leadership and functional executives. The Director provides the governance framework, enterprise coordination, and executive visibility necessary to support consistent risk management while respecting institutional authority and accountability. The Director strengthens the System by promoting a consistent enterprise approach to risk management that aligns decentralized institutional risk management practices with System-wide strategy, governance expectations, regulatory compliance, and Board oversight. Through enterprise coordination, executive advisory services, and strategic reporting, the Director enhances operational resilience, supports informed decision making, and reinforces clear accountability for risk ownership across the System.

Requirements

Knowledge of higher education governance, accreditation, regulatory compliance, and federal financial aid requirements.
Demonstrated success advising executive leadership and presenting complex risk and governance matters to senior leadership and Board committees.
Demonstrated ability to influence cross-functional stakeholders and build consensus in matrixed organizations where success depends on collaboration rather than direct authority.
Familiarity with recognized ERM frameworks (e.g., COSO ERM or ISO 31000).
Bachelor's degree in Business Administration, Risk Management, Finance, Accounting, Higher Education Administration, Public Administration, or a related field required.
Seven (7) to ten (10) years of progressively responsible experience in enterprise risk management, compliance, governance, internal audit, or related disciplines, including leadership responsibilities.
Demonstrated experience designing, implementing, and advancing ERM frameworks within complex, decentralized, or multi-entity organizations.
Experience leading enterprise-wide initiatives involving organizational change, governance transformation, or strategic business process improvement.

Nice To Haves

Master’s degree preferred.
Relevant professional certifications (e.g., CRM, CIA, CCEP, CISA, CRISC, or PMP) preferred.

Responsibilities

Develop, implement, and continuously enhance the System-wide ERM framework, methodologies, tools, and reporting standards.
Guide institutions in conducting risk assessments and maintaining institutional risk registers using consistent enterprise methodologies.
Aggregate and analyze institutional risk information to develop and maintain the System’s enterprise risk profile.
Identify and elevate cross-cutting, systemic, and emerging risks requiring executive leadership or Board consideration.
Facilitate the development and periodic review of the System’s risk appetite and risk tolerance in partnership with executive leadership and the Board.
Develop and maintain enterprise risk escalation protocols for material or emerging risks.
Lead the System Risk and Compliance Committee and other cross-functional governance committees.
Develop enterprise dashboards, key risk indicators (KRIs), and executive reports that support governance and strategic decision making.
Monitor the evolving federal, state, accreditation, and industry regulatory landscape affecting higher education.
Partner with executive leaders and functional subject matter experts to evaluate enterprise impacts of significant regulatory developments.
Provide executive leadership and institutional leaders with strategic regulatory briefings, trend analyses, and enterprise impact assessments.
Facilitate cross-functional coordination related to significant regulatory changes and emerging compliance risks.
Conduct proactive regulatory horizon scanning to support strategic planning and organizational preparedness.
Promote consistent enterprise communication regarding significant regulatory developments.
Prepare and present risk reports, dashboards, and emerging risk updates for executive leadership and Board committees.
Advise executive leadership and the Board regarding enterprise risks, regulatory developments, governance trends, and leading practices.
Support the Board’s enterprise risk governance responsibilities through education, strategic reporting, and periodic review of the System’s enterprise risk profile.
Establish and maintain enterprise risk assessment methodologies, documentation standards, and risk reporting practices.
Collaborate with Internal Audit, Legal Affairs, Compliance, and other functional leaders to provide enterprise risk insights that inform risk-based audit planning and compliance monitoring while maintaining the independence of assurance functions.
Facilitate periodic enterprise risk reviews to evaluate aggregate risk exposure, organizational resilience, and mitigation effectiveness.
Monitor trends in significant audit, compliance, and risk findings to identify recurring systemic issues and opportunities to strengthen governance and internal controls.
Develop and monitor enterprise key risk indicators (KRIs) and other metrics that measure changes in the System’s risk profile.
Provide strategic guidance and consultation to institutions in advancing Enterprise Risk Management (ERM) maturity.
Develop and maintain enterprise methodologies, tools, guidance, and educational resources that promote consistent risk management practices and compliance awareness.
Foster a culture of risk awareness, ethical decision making, and shared accountability throughout the System.
Promote the integration of enterprise risk management into strategic planning and executive decision making.
Support executive leadership through enterprise crisis governance, cross-functional coordination, and post-incident reviews.
Coordinate enterprise risk assessments with institutional business continuity, disaster recovery, and organizational resilience planning.
Develop and maintain enterprise incident reporting and risk escalation protocols.
Facilitate post-incident lessons learned reviews to identify systemic issues and strengthen enterprise resilience.