Assistant CIO Compliance & Risk Management

Overview

Princeton University seeks a dynamic and experienced Compliance and Risk Management Officer to join the Office of Information Technology’s senior leadership team. Reporting to the Vice President for Information Technology, the Assistant CIO of Compliance and Risk Management is responsible for leading the Office of Information Technology (OIT) team in ensuring that the university’s technology operations comply with relevant laws, regulations, and internal policies. This role involves monitoring compliance and risk management programs, tracking compliance activities, and providing training and guidance to staff. The Assistant CIO will provide leadership to OIT’s departments to ensure an organizational culture of compliance and ethical behavior. Lastly, the Assistant CIO provides leadership to the Senior Director of Digital Accessibility to ensure services provided to the campus community meet the digital accessibility requirements as defined by the University and government policies.

Responsibilities

Strategic Planning 

• Principal advisor to the Vice President for Information Technology on prioritizing and planning compliance and risk management programs to ensure adherence to legal and regulatory requirements.
• Lead the strategic planning and budgeting efforts for technological resources needed for compliance and risk management related programming.
• In partnership with the VP for Information Technology, envision, prepare, and prioritize long and short-range compliance and risk management plans for applications; systems development, integration, and IT support resources needed.
• Devise and coordinate multiple project schedules and related activities, from inception through project completion.
• Proactively stay up to date with changes in laws and privacy regulations that may impact the university’s technology operations.

Leadership

• Lead OIT’s efforts to develop and implement compliance programs and policies to ensure adherence to legal and regulatory requirements.
• Lead efforts to develop risk management strategies.
• Provide leadership to the various departments to ensure compliance with university policies and procedures and risk management programs.
• Serve as a senior OIT representative at the university’s Office of General Counsel (OGC) and Office of Audit and Compliance (OAC) compliance review meetings.
• Provide leadership to the Senior Director of Digital Accessibility in policy development and compliance related activities.

Operational Management

• Build tracking mechanisms to monitor compliance and risk management activities, including the preparation of compliance reports for senior management and regulatory bodies.
• Oversee the completion of the Information Security Office’s compliance related initiatives.
• Actively monitor progress on compliance and risk management initiatives.
• Proactively identify and implement action steps as needed.
• Lead team efforts to develop and maintain systems, programming, and operations documentation related to compliance programs.
• Identify support needed to the various departments to ensure all compliance programs are successfully completed.
• Actively participate in professional associations to stay informed of best practices related to compliance programs and risk management strategies.
• Proactively work with the Senior Director of Digital Accessibility on all aspects related to strategic planning, policy development, compliance and other digital accessibility services.

Working Conditions

• This position is based at the university's main campus and may require occasional travel to other campuses or locations.
• The Assistant CIO will work in an office environment and may need to attend meetings and training sessions outside of regular business hours.

Qualifications

Essential Qualifications

• Bachelor’s degree in Business Administration, Information Technology, Law, or a related field.
• Minimum of 7 years of experience in a compliance role, preferably within a technology or higher education environment.
• Strong knowledge of compliance regulations and standards, including data privacy laws (e.g., GDPR, FERPA) and cybersecurity frameworks (e.g., NIST, ISO).
• Excellent analytical and problem-solving skills, with the ability to identify and mitigate compliance risks.
• Strong communication and interpersonal skills, with the ability to effectively train and guide staff.
• Ability to work independently and collaboratively in a fast-paced environment.
• High level of integrity and ethical standards.

Preferred Qualifications

• Master’s degree or relevant certification (e.g., Certified Compliance