Policy and Risk Specialist

About the Department

George Mason University’s Enterprise Risk Management (ERM) exists to promote institutional resilience by identifying, assessing, and managing risks that could affect the university’s mission. The unit also oversees policy management and building code compliance to ensure clear, consistent, and accountable governance across the institution. Through collaboration, transparency, and proactive guidance, it supports informed decision‑making and strengthens the university’s culture of integrity and risk awareness.

The Policy and Risk Specialist strengthens organizational effectiveness by coordinating the development, review, and maintenance of institutional policies while supporting the identification, assessment, and mitigation of enterprise‑level risks.

• Serve as University Policy Manager coordinating the full lifecycle of institutional policies, including providing information to policy owners as they draft and revise policies, supporting review by the Policy Management Group, facilitating approval, publishing policies to the policy website, and archiving.
• Guide policy owners through required processes, templates, timelines, and governance structures.
• Maintain the policy repository and ensure version control, consistency, and clarity in policy language.
• Support transparency by keeping the website up‑to‑date with current policies listed and helpful information posted to enable the policy management process.
• Contribute to policy management efficiency and effectiveness by contributing ideas and raising concerns with the Policy Management Group co‑chairs.

• Prepare draft materials for meetings and presentations focused on ERM, as well as coordinating AV support as needed and taking notes and preparing meeting minutes.
• Prepare clear, consistent, and professional materials in support of the ERM program including contributing to web content.
• Serve as project manager, tracking and coordinating requests and follow up with Executive Risk Owners and Action Plan Risk Owners for content, updates, and feedback.
• Utilize technology in support of the ERM program including inputting data, preparing reports, utilizing analysis capabilities, and assisting risk owners in providing information to the system as applicable.

• Support development of guidance documents and materials related to the policy process and ERM.
• Support communication by maintaining list‑serves and sending communication on behalf of the Policy Management Group and on behalf of ERM.
• Schedule complex meetings such as Policy Management Group meetings, ERM Council meetings, meetings with senior leadership team members, working groups, and similar.
• Maintain accurate documentation, meeting minutes, schedules, and tracking systems for ERM and policy workflows.
• Support the preparation of reports for senior leadership, auditors, and governance bodies.
• Assist with data management, analysis, and process‑improvement across the unit.
• Support development of training materials for ERM, policy, and other related areas as they emerge.

• Related tasks assigned by the supervisor and department head.

• Bachelor’s degree in related field, or equivalent combination of education and experience.
• Typically, 3‑5 years of professional experience in policy development, risk management, compliance, project management, governance, or a related administrative or analytical role.
• Experience supporting complex processes involving multiple stakeholders, such as policy review cycles, compliance workflows, or cross‑departmental initiatives.
• Experience preparing reports, documentation, or communication for leadership or governance bodies.
• Knowledge of processes for developing and implementing policies, procedures and ERM strategies, including drafting, revision, governance structures, and approval workflows within complex organizations.
• Knowledge of software frequently used by ERM including Microsoft Suite (SharePoint, Teams, Word, Excel, PowerPoint, etc.), Docu Sign, and the Adobe Suite.
• Skill in coordinating meetings, responding to requests and questions, and supporting stakeholders through structured…