Internal Audit and Compliance Manager - Enterprise Risk Management

world through scholarship and creative activity in the social sciences and humanities. As one of the most diverse public research institutions in the nation, the University is a national leader in public engagement, educational equity and social mobility. For over 180 years, UAlbany has molded bright, curious and engaged students and launched them toward success.

Located in Albany, New York, New York State's capital, the University is convenient to Boston, New York City, and the Adirondacks.

Job Description:

The Office of Enterprise Risk Management and Compliance in the Division of Finance and Administration is charged with creating processes, structures, services and associated monitoring mechanisms to help ensure the University can meet this commitment.

The Office of Enterprise Risk Management and Compliance:

• oversees a comprehensive enterprise risk management system at the University.
• monitors compliance by the University with all required internal and external rules, policies, regulations, and laws.
• advances a living, learning, and working environment that is safe, welcoming, and free from discrimination and sexual violence.
• creates, maintains, and enforces a comprehensive set of institutional policies that assist the University in meeting all of its goals.
• manages and implements a comprehensive emergency management and continuity preparation, training, planning, and response program.
• implements review and testing systems required to help ensure that the University has the proper controls in place to continue to meet its objectives and mission.

Reporting to the Chief Enterprise Risk Management and Compliance Officer, the Internal Audit and Compliance Manager provides independent, objective assurance and advisory services and plays a key role in informing institutional decision-making services to strengthen the University's governance, compliance, and internal control environment.

In its advisory capacity, the position contributes to the development, interpretation, and implementation of university-wide compliance policies, governance frameworks, and institutional standards, and provides recommendations to senior leadership on compliance strategy, risk mitigation, and internal control enhancements.

The role evaluates the adequacy and effectiveness of internal controls and compliance processes, maintaining independence from day-to-day operational decision-making while providing advisory input that informs institutional policy, governance, and strategic compliance decisions.

The position collaborates with and advises compliance owners, the Data Governance Council, the Privacy Office, and Information Technology.

Primary Responsibilities:

• Conduct independent internal audits across all University units, with a focus on compliance with federal, state, and institutional requirements areas such as privacy regulations, data protection, research, financial aid, and other higher education regulations.
• Participate in and inform the development and review of University-wide compliance policies, governance frameworks, and internal control standards. Provide independent, risk based advisory opinions on compliance frameworks in areas critical to the University's strategic goals, specifically including data governance and privacy, in support of the operational owners of those programs, while maintaining independence for future assurance activities. Advisory opinions will inform compliance strategy, policy direction, and enterprise decision-making.
• Identify and assess emerging compliance risks and make appropriate recommendations to University leadership. Interpret compliance requirements and recommend institutional policy responses for leadership consideration.
• Collaborate with compliance owners across the University to support consistent, risk based compliance practices.
• Develop clear, concise reports and present findings and recommendations to University leadership to support senior management in evaluating and implementing policy changes affecting compliance operations.
• Other reasonable duties as assigned.

Functional and Supervisory Relationships:

• Reports to: Chief Enterprise Risk Management and Compliance Officer
• Supervises the following positions: None
• Functionally works with: Internal Control and Risk Officer, Data Privacy Officer, Data Governance Council, IRPE, CIO and CISO, Controller's Office, Financial Aid and Student Accounts.

Job Requirements:

• Ability to provide critical assessment and strategic recommendations on key compliance regulations.
• Foundational knowledge of at least some critical compliance areas, preferably in the area of data privacy and governance.
• Willingness and ability to quickly learn new compliance areas independently. Must maintain independence while building strong, collaborative relationships across the University.
• Strong analytical, communication, and independent judgment skills, with the ability to work effectively in a decentralized environment.
• Applicants must demonstrate an ability to develop inclusive and equitable relationships within our diverse campus community.
• Applicants must demonstrate an ability to support diversity, equity, access, inclusion, and belonging relative to their role.

Requirements:

Minimum Qualifications:

• Bachelor's degree from a college or University accredited by the US Department of Education or an internationally recognized accrediting organization.
• Substantial, progressively responsible experience in internal auditing, compliance, risk management, information systems auditing, or related fields.
• Demonstrated experience evaluating or administering internal controls and compliance processes.
• Demonstrated familiarity with privacy requirements applicable to higher education (e.g., FERPA).

Preferred Qualifications:

• Master's degree from a college or University accredited by the US Department of Education or an internationally recognized accrediting organization.
• Professional certification(s) such as CIA, CISA, CIPP, CRISC, CDMP, or CPA.
• Experience in higher education, research administration, or public sector environments.
• Experience conducting audits or assessments related to data governance, privacy compliance, information security, or IT general controls.
• Demonstrated work experience or training in data governance concepts and data governance or privacy frameworks.
• Direct experience working within the SUNY System.

Working Environment:

Typical office environment

Additional Information:

Professional Rank and Salary Range: Assistant for University Financial Analysis, MP, $105,000-115,000.

Special Notes: Visa sponsorship is not available for this position. If you currently need sponsorship or will need it in the future to maintain employment authorization, you do not meet eligibility requirements. Additionally, please note that UAlbany is not an E-Verify employer.