Internal Audit and Compliance Manager - Enterprise Risk Management - University at Albany
Listed on 2026-07-10
-
Business
Financial Compliance, Risk Manager/Analyst, Regulatory Compliance Specialist
Location: Albany, NY Category: Professional Job Type: Full‑time
The Office of Enterprise Risk Management and Compliance in the Division of Finance and Administration creates processes, structures, services and monitoring mechanisms to help ensure the University meets its commitment. It oversees a comprehensive enterprise risk management system, monitors compliance with internal and external rules, promotes a safe and inclusive environment, maintains institutional policies, manages emergency management and continuity, and implements review and testing systems for proper controls.
ReportingOrganization
Reports to:
Chief Enterprise Risk Management and Compliance Officer. Supervises none.
- Conduct independent internal audits across all University units, focusing on compliance with federal, state and institutional requirements such as privacy regulations, data protection, research, financial aid and other higher‑education regulations.
- Participate in and inform development and review of University‑wide compliance policies, governance frameworks and internal control standards. Provide independent, risk‑based advisory opinions on compliance frameworks, especially data governance and privacy.
- Identify and assess emerging compliance risks and make appropriate recommendations to University leadership.
- Collaborate with compliance owners across the University to support consistent, risk‑based compliance practices.
- Develop clear, concise reports and present findings and recommendations to University leadership to support policy change and implementation.
- Other reasonable duties as assigned.
- Works with Internal Control and Risk Officer, Data Privacy Officer, Data Governance Council, IRPE, CIO and CISO, Controller’s Office, Financial Aid and Student Accounts.
- Ability to provide critical assessment and strategic recommendations on key compliance regulations.
- Foundational knowledge of at least some critical compliance areas, preferably data privacy and governance.
- Willingness and ability to learn new compliance areas independently while maintaining independence.
- Strong analytical, communication and independent judgment skills, effective in a decentralized environment.
- Ability to develop inclusive and equitable relationships within a diverse campus community.
- Support for diversity, equity, access, inclusion and belonging in the role.
- Bachelor’s degree from a regionally accredited college or university.
- Substantial, progressively responsible experience in internal auditing, compliance, risk management, information systems auditing or related fields.
- Experience evaluating or administering internal controls and compliance processes.
- Familiarity with privacy requirements applicable to higher education (e.g., FERPA).
- Master’s degree from a regionally accredited college or university.
- Professional certification(s) such as CIA, CISA, CIPP, CRISC, CDMP or CPA.
- Experience in higher education, research administration or public sector environments.
- Experience conducting audits or assessments related to data governance, privacy compliance, information security or IT general controls.
- Experience with data governance concepts and frameworks.
- Direct experience working within the SUNY System.
- Typical office environment.
Professional Rank and Salary Range: Assistant for University Financial Analysis, MP, $,000.
Special Notes: Visa sponsorship is not available for this position. If you currently require sponsorship or will need it in the future to maintain employment authorization, you do not meet eligibility requirements. UAlbany is not an E‑Verify employer.
The University at Albany is an EO/AA/IRCA/ADA employer.
#J-18808-Ljbffr(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).