Location: Albany, NY
Category: Professional
Job Type: Full-time
Posted On: Mon Jul 6 2026
Job Description:
The Office of Enterprise Risk Management and Compliance in the Division of Finance and Administration is charged with creating processes, structures, services and associated monitoring mechanisms to help ensure the University can meet this commitment.
The Office of Enterprise Risk Management and Compliance:
- oversees a comprehensive enterprise risk management system at the University.
-
monitors compliance by the University with all required internal and external rules, policies, regulations, and laws.
-
advances a living, learning, and working environment that is safe, welcoming, and free from discrimination and sexual violence.
-
creates, maintains, and enforces a comprehensive set of institutional policies that assist the University in meeting all of its goals.
-
manages and implements a comprehensive emergency management and continuity preparation, training, planning, and response program.
-
implements review and testing systems required to help ensure that the University has the proper controls in place to continue to meet its objectives and mission.
Reporting to the Chief Enterprise Risk Management and Compliance Officer, the Internal Audit and Compliance Manager provides independent, objective assurance and advisory services and plays a key role in informing institutional decision-making services to strengthen the University's governance, compliance, and internal control environment.
In its advisory capacity, the position contributes to the development, interpretation, and implementation of university-wide compliance policies, governance frameworks, and institutional standards, and provides recommendations to senior leadership on compliance strategy, risk mitigation, and internal control enhancements.
The role evaluates the adequacy and effectiveness of internal controls and compliance processes, maintaining independence from day-to-day operational decision-making while providing advisory input that informs institutional policy, governance, and strategic compliance decisions.
The position collaborates with and advises compliance owners, the Data Governance Council, the Privacy Office, and Information Technology.
Primary Responsibilities:
- Conduct independent internal audits across all University units, with a focus on compliance with federal, state, and institutional requirements areas such as privacy regulations, data protection, research, financial aid, and other higher education regulations.
-
Participate in and inform the development and review of University-wide compliance policies, governance frameworks, and internal control standards. Provide independent, risk based advisory opinions on compliance frameworks in areas critical to the University's strategic goals, specifically including data governance and privacy, in support of the operational owners of those programs, while maintaining independence for future assurance activities. Advisory opinions will inform compliance strategy, policy direction, and enterprise decision-making.
-
Identify and assess emerging compliance risks and make appropriate recommendations to University leadership. Interpret compliance requirements and recommend institutional policy responses for leadership consideration.
-
Collaborate with compliance owners across the University to support consistent, risk based compliance practices.
-
Develop clear, concise reports and present findings and recommendations to University leadership to support senior management in evaluating and implementing policy changes affecting compliance operations.
-
Other reasonable duties as assigned.
Functional and Supervisory Relationships:
- Reports to: Chief Enterprise Risk Management and Compliance Officer
-
Supervises the following positions: None
-
Functionally works with: Internal Control and Risk Officer, Data Privacy Officer, Data Governance Council, IRPE, CIO and CISO, Controller's Office, Financial Aid and Student Accounts.
Job Requirements:
- Ability to provide critical assessment and strategic recommendations on key compliance regulations.
-
Foundational knowledge of at least some critical compliance areas, preferably in the area of data privacy and governance.
-
Willingness and ability to quickly learn new compliance areas independently. Must maintain independence while building strong, collaborative relationships across the University.
-
Strong analytical, communication, and independent judgment skills, with the ability to work effectively in a decentralized environment.
-
Applicants must demonstrate an ability to develop inclusive and equitable relationships within our diverse campus community.
-
Applicants must demonstrate an ability to support diversity, equity, access, inclusion, and belonging relative to their role.
Job Requirements:
Minimum Qualifications:
- Bachelor's degree from a college or University accredited by the US Department of Education or an internationally recognized accrediting organization.
-
Substantial, progressively responsible experience in internal auditing, compliance, risk management, information systems auditing, or related fields.
-
Demonstrated experience evaluating or administering internal controls and compliance processes.
-
Demonstrated familiarity with privacy requirements applicable to higher education (e.g., FERPA).
Preferred Qualifications:
- Master's degree from a college or University accredited by the US Department of Education or an internationally recognized accrediting organization.
-
Professional certification(s) such as CIA, CISA, CIPP, CRISC, CDMP, or CPA.
-
Experience in higher education, research administration, or public sector environments.
-
Experience conducting audits or assessments related to data governance, privacy compliance, information security, or IT general controls.
-
Demonstrated work experience or training in data governance concepts and data governance or privacy frameworks.
-
Direct experience working within the SUNY System.
Working Environment:
Additional Information:
Professional Rank and Salary Range: Assistant for University Financial Analysis, MP, $105,000-115,000.
Special Notes: Visa sponsorship is not available for this position. If you currently need sponsorship or will need it in the future to maintain employment authorization, you do not meet eligibility requirements. Additionally, please note that UAlbany is not an E-Verify employer.
The Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, or Clery Act, mandates that all Title IV institutions, without exception, prepare, publish, and distribute an Annual Security Report. This report consists of two basic parts: disclosure of the University's crime statistics for the past three years; and disclosures regarding the University's current campus security policies. The University at Albany's Annual Security Report is available in portable document format [PDF] by clicking this link http://police.albany.edu/ASR.shtml
Pursuant to NYS Labor Law 194-A, no State entity, as defined by the Law, is permitted to rely on, orally or in writing seek, request, or require in any form, that an applicant for employment provide his or her current wage, or salary history as a condition to be interviewed, or as a condition of continuing to be considered for an offer of employment, until such time as the applicant is extended a conditional offer of employment with compensation, and for the purpose of verifying information, may such requests be made. If such information has been requested from you before such time, please contact the Governor's Office of Employee Relations at (518) 474-6988 or via email at [email protected].
THE UNIVERSITY AT ALBANY IS AN EO/AA/IRCA/ADA EMPLOYER
Please apply online via http://albany.interviewexchange.com/candapply.jsp?JOBID=202211
