Senior Director, Institutional Compliance, Internal Audit, and Enterprise Risk Management

Department

F&A Internal Audit and Compliance

About the Department

The University of Chicago is committed to maintaining a culture of responsibility in which its community members conduct themselves in accordance with the highest standards. As part of this commitment, the University seeks to maintain an effective compliance program in which University community members are aware of, understand and comply with applicable laws, rules, regulations, policies, and procedures, including University policies and procedures.

To promote excellence in, and otherwise support, University compliance efforts, the University has established an Office of Compliance and also has convened a Compliance Committee consisting of senior University leaders. The overall mission of the Office of Compliance is to promote an organizational culture and support a formal compliance program that encourages ethical conduct, a commitment to compliance with the law and University policies, and accountability for these obligations in furtherance of the University’s values and pursuit of eminence.

The purpose of the Internal Audit function at the University is to provide the Board of Trustees and senior University administration with an independent assessment of the University’s system of internal controls. Internal Audit examines and evaluates the controls in place to safeguard University assets, evaluates the effective use of resources, reviews compliance with policies, procedures, laws and regulations to protect the research and teaching mission of the University. The University of Chicago’s Internal Audit Charter governs the activities of the University’s Internal Audit function.

The Enterprise Risk Management program is informed by Compliance and Internal Audit efforts, and creates a uniform process for evaluating the key risk areas identified in the Internal Auditor’s triennial risk assessment. The output of this program is presented to the Board of Trustees Audit Committee, and informs discussions with the Committee, as well as the internal audit plan.

Job Summary

Reporting to the Assistant Vice President (AVP) for Institutional Compliance, Internal Audit, and Enterprise Risk Management (ERM). The Senior Director will serve as a strategic partner in overseeing and advancing the University’s internal audit, ERM, and compliance programs. The Senior Director will lead the day-to-day management of outsourced internal audit activities, coordinate across compliance partners, and support strategic enterprise risk management initiatives in a decentralized environment. This leader will play a critical role in implementing transformative audit and risk capabilities including data analytics, automation, and artificial intelligence.

Responsibilities

• Provides strategic leadership and direct supervision to the University’s outsourced internal audit firm, leading the engagement teams through scoping, fieldwork execution, deliverables, reporting timelines, and issue resolution.
• Supports the development and execution of multi-year strategic plans for internal audit, enterprise risk management, and compliance programs. Aligns initiatives with institutional priorities and emerging regulatory landscapes.
• Leads the administration and analysis of the University’s enterprise risk management (ERM) program, including risk identification, assessment, mitigation planning, and reporting.
• Supports the execution of the University’s Integrated ERM and Compliance Committee, working closely with units across the University and UChicago Medicine on areas of shared risk.
• Partners with compliance leads to harmonize compliance processes, support training, monitor emerging regulations, and track remediation plans.
• Analyzes and reports on risk trends, audit findings, and compliance metrics to senior leadership and the Audit Committee of the Board of Trustees.
• Supports the AVP in preparing materials, dashboards, and reports to senior leadership and the Audit Committee, ensuring accuracy, clarity, and alignment with strategic priorities.
• Assists in responding to senior leadership and Audit Committee requests and inquiries, and ensures timely delivery of updates on risk, audit, and compliance matters.
• Oversees day-to-day administration and case triage for the University’s Whistleblower Hotline (NAVEX), including coordinating investigations, ensuring timely resolution, and analyzing trends to inform risk assessments.
• Contributes to the continued development and enhancement of the University's Compliance Program.
• Supports the evolution of the ERM program through improved methodology, stakeholder engagement, and integration with planning, audit, and compliance activities.
• Collaborates with functional and academic units to build risk ownership and embed decision-ma