Director of Compliance and Enterprise Risk Management

Job Description

The Opportunity

The Director of Enterprise Risk Management and Compliance leads two connected programs within the Office of Audit, Risk, and Compliance (OARC): the University’s enterprise risk management program and its institutional compliance program. The Director advances an established ERM architecture and compliance management framework, strengthens how both inform decision-making by senior leadership and the Board of Trustees, and works across a highly decentralized institution to keep risk and compliance practices effective, current, and proportionate to the University’s exposure.

OARC integrates internal audit, enterprise risk management, and institutional compliance under a shared framework. The Director serves as a collaborative partner to units across the University, helping them own and manage their risks and compliance obligations, while OARC provides coordination, methodology, monitoring, and reporting. The position reports to the Chief Audit Executive.

Enterprise Risk Management Responsibilities

• Lead and continue to mature the University’s ERM program, including the enterprise risk register, risk theme structure, and the methods used to identify, assess, and monitor strategic and operational risks
• Facilitate the ERM Steering Committee and prepare risk reporting for senior leadership and the Board of Trustees
• Partner with units to translate departmental risks into enterprise-level risk views that support strategic planning and resource decisions
• Advance risk analysis methods over time, including scenario-based and quantitative approaches where they add decision value
• Coordinate with internal audit so that risk information informs the audit plan and audit results inform the risk picture, while preserving the independence of the audit function

Institutional Compliance Responsibilities

• Coordinate compliance activities across a highly decentralized environment, working with designated compliance owners in each area
• Maintain and operate the University’s compliance management framework and system, including regulatory requirements, controls, owner assessments, and status reporting
• Monitor the regulatory environment (for example Title IX, Clery Act, FERPA, GLBA, Title IV, export controls, and aviation regulations), assess impact, and communicate relevant changes and recommended actions to the responsible owners
• Prioritize compliance efforts based on risk exposure and monitor the effectiveness of compliance activities on an ongoing basis
• Coordinate and escalate potential compliance concerns to the appropriate channels for review and resolution
• Support development of compliance training and communications for employees and managers
• Report regularly to senior leadership and the Board of Trustees on the state of compliance

About us

For over 100 years, Embry-Riddle has been the world's leading aviation and aerospace university, educating more than 30,000 students across residential campuses in Daytona Beach, Florida, and Prescott, Arizona, as well as through a global network of Worldwide locations and online programs. With more than 165,000 alumni around the world, our impact reaches every corner of the aerospace, aviation, defense and technology industries.

Today, our faculty, researchers and professional staff are advancing innovation across aviation, space, artificial intelligence, cybersecurity, autonomous systems and next-generation engineering. Working alongside industry leaders, government agencies and innovators, they are solving real-world challenges and shaping the technologies that will define tomorrow.

Whether you are an educator, researcher, administrator, technologist or industry professional, your work at Embry-Riddle will contribute to something bigger than a job. Join a community driven by discovery, purpose and excellence—and help shape the future of aerospace.

• Generous Time Off: Enjoy up to 18 days of paid leave in your first year, including 3 days granted upon hire and 15 days accrued throughout the year. You'll also receive 9+ paid holidays, including the day after Thanksgiving and the week between Christmas Eve and New Year's Day.
• Tuition Coverage: Get 100% tuition coverage for yourself for one undergraduate and one graduate degree, and discounted rates for your spouse and dependent children up to age 26.
• Retirement Contributions: ERAU contributes 6% of your base salary to your retirement plan and offers a 4% matching contribution – with no vesting period.
• Personal Leave: Relax with 15 days of personal leave for non-exempt employees or 18 days for exempt full-time employees in your first year.

Qualifications

• Required Education:
• Bachelor's Degree in Business Administration, Law, Risk Management or a related field
• Required Licenses, Certificates, and/or Security Clearances:
• Relevant certifications such as CCEP, CRMA, CRISC, or an ERM credential
• Required Skills, Knowledge, and Abilities:
• Demonstrated experience building or running a risk register, a compliance program, or a comparable management-owned framework, and facilitating risk and compliance discussions with senior leaders
• Demonstrated skill in assessing and communicating risk to senior leaders and governing bodies
• Working knowledge of higher education operations, regulations, and accreditation, or the ability to build that depth quickly
• Experience leading and coordinating work through influence in a large, complex, decentralized organization
• Strong written and verbal communication skills
• Sound judgment and discretion with confidential and sensitive matters
• Preferred Skills, Knowledge, and Abilities:
• Master’s degree
• Internal audit, controls, or assurance experience that complements second-line risk and compliance work
• Familiarity with recognized frameworks such as COSO ERM or ISO 31000
• Experience with governance, risk, and compliance technology
• Experience with quantitative risk analysis or data analytics
• Comfort using emerging tools, including AI-assisted approaches, to improve monitoring and analysis
• Experience:
• Seven to ten years of progressively responsible experience leading or operating enterprise risk management, compliance, or both, preferably within higher education or a similarly complex organization