Director, Risk Management

Tulane University•New Orleans, LA

About The Position

The Director of Risk Management and Policy Development is responsible for strategically developing, implementing, and overseeing data-driven policy development and risk management strategies across the university. The role integrates traditional policy frameworks with data analytics to improve risk identification, training effectiveness, and compliance monitoring, while ensuring policies align with institutional objectives, regulatory requirements, and enterprise risk management best practices. The Director owns the Policy on Policy and advises departments and leadership on policy development, revision, and implementation. They manage the full policy lifecycle, maintain the university policy library and version control, establish a policy review schedule, and coordinate policy announcements and outreach with University Communications and the Office of the Chief Operating Officer. The Director develops risk assessment and gap analysis methodologies to identify and mitigate operational, compliance, and reputational risks. In collaboration with department heads, they identify policy and compliance gaps and implement mitigation strategies and policy updates. They administer key Enterprise Risk Services policies, monitor regulatory compliance, supervise the Training Manager, and use data analytics to assess the effectiveness of policies and risk management initiatives. The Director collaborates with department heads, academic units, Enterprise Risk Services leadership, and enterprise risk committees to foster compliance and risk awareness and advance institutional initiatives. They lead development and maintenance of the university policy website and prepare reports, dashboards, and insights for university leadership.

Requirements

Bachelor’s degree in risk management, business, or a related field.
At least 10 years of relevant experience in a large, complex, decentralized environment, including at least three years at a supervisory or managerial level.
At least five years of experience in risk management and policy development.
Knowledge of occupational requirements, including OSHA requirements relating to workplace healthcare, medical surveillance, and medical screening.
Knowledge of OSHA recordkeeping and reporting requirements.
Strong verbal and written communication skills for working professionally with stakeholders.
Ability to maintain confidentiality of medical records.
Ability to motivate and direct people within and outside the office.
Ability to manage material resources and operational funding effectively.
Proficiency in Microsoft Office Suite programs.
Ability to maintain an organized digital file system.
Ability to collaborate with multiple parties and develop operational and compliance policies.
Broad understanding of occupational health and safety regulatory requirements beyond surveillance requirements.

Nice To Haves

Master’s degree in a relevant field.
Experience working in a highly complex higher education setting.
Experience with HIPAA requirements.
Experience using compliance tracking software for regulatory compliance.
Experience with occupational accident investigation.
Experience with software development and implementation.

Responsibilities

Develop, implement, and oversee data-driven policy development and risk management strategies across the university.
Own the Policy on Policy and advise departments and leadership on policy development, revision, and implementation.
Manage the policy lifecycle, including initiation, drafting, stakeholder engagement, review, approval, implementation, and periodic updates.
Maintain the university policy library, including its accessibility, organization, and version control, and develop a policy review schedule.
Coordinate policy announcements and outreach with University Communications and the Office of the Chief Operating Officer.
Develop and implement risk assessment and gap analysis methodologies to identify, analyze, and mitigate operational, compliance, and reputational risks.
Work with department heads to identify policy and compliance gaps, develop mitigation strategies, and implement policy updates.
Administer key administrative policies within the Enterprise Risk Services department and monitor compliance with local, state, and federal regulations.
Supervise the Training Manager and oversee compliance training programs for faculty, staff, and students.
Use data analytics to assess the effectiveness of policies and risk management initiatives and inform strategic decisions.
Collaborate with department heads, academic units, and Enterprise Risk Services leadership to foster compliance and risk awareness and implement enterprise risk initiatives.
Participate in enterprise risk committees and present to the Governance Risk and Compliance Executive Council.
Lead development and maintenance of a university policy website.
Develop reports, dashboards, and insights for university leadership.
Develop, implement, and manage a program and work with minimal oversight to achieve expected results.
Communicate professionally with stakeholders, solicit input, and support continuous program improvement.
Maintain confidentiality of medical records and an organized digital file system.
Motivate and direct people within and outside the office, and manage material resources and operational funding.
Collaborate with multiple parties to develop policies that guide operations and compliance.