Director of Compliance & Risk Management

About the role

Reporting to the General Counsel, the Director of Compliance & Risk Management serves as a key member of the University’s leadership team, responsible for advancing Fordham’s enterprise approach to compliance while further developing and integrating risk management practices across the institution.

At a pivotal time for the University, Fordham continues to evolve and strengthen its integrated approach to compliance and risk. This role offers a unique opportunity to shape and mature a comprehensive, university-wide compliance framework within a complex, decentralized academic environment.

The Director will partner closely with senior leadership and stakeholders across academic, administrative, research, and technology functions to ensure alignment with regulatory requirements, strengthen governance structures, and promote a culture of ethical conduct and accountability.

Responsibilities

• Serves as the leader for the University’s Hub and Spoke Hybrid compliance model, providing strategic direction to operational units while partnering with subject matter leaders across the institution.
• Develops, implements, and maintains a comprehensive, university-wide compliance and ethics program, ensuring its effectiveness and continuous improvement.
• Manages and oversees all major regulatory reporting requirements across diverse areas, including but not limited to Title VI, Title VII, Title IX, HIPAA, ERISA, Clery, FERPA, financial aid compliance, research compliance, NCAA, and information technology governance, cybersecurity, and data privacy.
• Designs and oversees the integrated Enterprise Risk Management (ERM) framework, ensuring alignment between compliance mandates, risk assessments, and internal audit plans.
• Directs the work of the Compliance and Operations Manager, ensuring coordinated, non-duplicative efforts.
• Oversees monitoring activities, utilizing university staff expertise and directing the engagement of external specialized risk professionals for unique when justified.
• Leads the comprehensive review and approval process for all university compliance-related policies and procedures.
• Oversees the centralized Incident Reporting & Investigation mechanism, making final determinations on required actions and coordinating with Human Resources, Student Affairs, Public Safety, Office of General Counsel, and other offices as required.
• Ensures robust, relevant “Training & Awareness” programs are deployed across the university, utilizing scalable, technology-driven platforms.
• Strategically integrates and oversees analytics and AI-powered tools for predictive risk modeling, real-time compliance monitoring, and anomaly detection across university operations, for interpreting results for executive action.
• Leverages Governance, Risk, and Compliance (GRC) software platforms for centralized risk data aggregation, analysis, and reporting, translating complex data insights into actionable strategic recommendations for senior leadership.
• Governs technology risk and cyber-compliance, maintaining a comprehensive understanding of the governance and compliance implications of IT systems, data privacy (e.g., FERPA, HIPAA), and cybersecurity, and leading the university’s response to the ethical, regulatory, and institutional risks associated with AI.

Qualifications

• Master’s degree in business, law, public administration, higher education, information systems, or a related field.
• Minimum of seven (7) years of progressively responsible leadership experience in compliance, risk management, internal audit, governance, and/or related control functions.
• Demonstrated experience designing, implementing, or leading enterprise or organization-wide compliance and/or risk management initiatives in decentralized organizations.
• Familiarity with data privacy, cybersecurity governance, and/or emerging regulatory and ethical considerations related to technology and AI.
• Experience designing, implementing, and leading complex enterprise-wide compliance or risk management programs in decentralized organizations.
• Strategic experience leveraging modern technology solutions, including enterprise systems, workflow automation, data analytics, dashboards, and AI-enabled tools to improve compliance oversight and risk management effectiveness.
• Strong understanding of technology risk, cybersecurity governance, data privacy, and emerging issues related to artificial intelligence, with the ability to assess and advise on institutional risk in a dynamic technology environment.
• Proven ability to work across diverse stakeholder groups and influence outcomes within decentralized or matrixed organizations.
• Excellent communication and leadership skills, including the ability to synthesize complex issues and present actionable recommendations to senior leadership.

Benefits

This position does not offer benefits.

Pay

$195,000 - $215,000

Schedule

Hybrid schedule with 35 hours per week.