Director, Risk Management

Tulane University•New Orleans, LA

About The Position

The Director of Risk Management and Policy Development leads the strategic development, implementation, and oversight of data-driven policy development and risk management strategies across the university. The role combines policy frameworks and data analytics to strengthen risk identification, training effectiveness, and compliance monitoring, while ensuring policies align with institutional objectives, regulatory requirements, and enterprise risk management best practices. The Director owns the Policy on Policy and advises departments and university leadership on policy development, revision, and implementation. They oversee the full policy lifecycle, maintain the university policy library and review schedule, and work with University Communications and the Office of the Chief Operating Officer to communicate policies and support university-wide outreach. The role develops risk assessment and gap analysis methods to identify and mitigate operational, compliance, and reputational risks. In collaboration with department heads, the Director identifies policy and compliance gaps, develops mitigation strategies, administers key Enterprise Risk Services policies, and monitors compliance with applicable regulations. The Director supervises the Training Manager and oversees compliance training for faculty, staff, and students. Using data analytics, the Director evaluates policy and risk management effectiveness and prepares reports, dashboards, and insights for university leadership. They collaborate with academic and administrative units, participate in enterprise risk committees, support enterprise risk initiatives, and lead development and maintenance of the university policy website.

Requirements

Bachelor’s degree in risk management, business, or a related field.
At least 10 years of relevant experience in a large, complex, decentralized environment.
At least 3 years of experience at the supervisory or managerial level.
At least 5 years of experience in risk management and policy development.
Ability to develop, implement, and manage a program.
Ability to work with minimal oversight to achieve expected results.
Knowledge of occupational requirements, including OSHA requirements related to workplace healthcare, medical surveillance, and medical screening.
Knowledge of OSHA recordkeeping and reporting requirements.
Strong verbal and written communication skills in a professional environment.
Ability to maintain confidentiality of medical records.
Ability to motivate and direct people within and outside the office.
Ability to manage material resources and operational funding.
Proficiency in Microsoft Office Suite programs.
Ability to maintain an organized digital file system.
Ability to collaborate with multiple parties and develop policies that guide operations and compliance.
Broad understanding of occupational health and safety regulatory requirements beyond surveillance requirements.

Nice To Haves

Master’s degree in a relevant field.
Experience working in a highly complex higher education setting.
Experience with HIPAA requirements.
Experience using compliance tracking software for regulatory compliance.
Experience with occupational accident investigation.
Experience with software development and implementation.

Responsibilities

Develop, implement, and oversee data-driven policy development and risk management strategies across the university.
Serve as the primary owner of the Policy on Policy and advise departments and leadership on policy development, revision, and implementation.
Manage the full policy lifecycle, including initiation, drafting, stakeholder engagement, review, approval, implementation, and periodic updates.
Maintain the university policy library, including its accessibility, organization, and version control, and develop a schedule for policy reviews.
Coordinate with University Communications and the Office of the Chief Operating Officer to develop and distribute policy announcements and facilitate outreach.
Develop and implement risk assessment and gap analysis methodologies to identify, analyze, and mitigate operational, compliance, and reputational risks.
Work with department heads to identify policy and compliance gaps, develop mitigation strategies, and implement policy updates.
Administer key Enterprise Risk Services policies and monitor compliance with local, state, and federal regulations.
Supervise the Training Manager and oversee compliance training programs for faculty, staff, and students.
Use data analytics to assess policy and risk management effectiveness and inform strategic decision-making.
Collaborate with department heads and academic units to foster a culture of compliance and risk awareness.
Participate in enterprise risk committees and present to the Governance Risk and Compliance Executive Council.
Facilitate implementation of enterprise risk initiatives in coordination with Enterprise Risk Services leadership.
Lead development and maintenance of a university policy website.
Develop reports, dashboards, and insights for university leadership.
Develop, implement, and manage programs; work with minimal oversight; and manage people, material resources, and operational funding.
Maintain confidentiality of medical records and an organized digital file system.
Communicate effectively with stakeholders, solicit input, and collaborate with multiple parties to develop operational and compliance policies.
Apply knowledge of workplace healthcare requirements, medical surveillance and screening, OSHA recordkeeping and reporting, and occupational health and safety regulations.