Manager, University Policy and Enterprise Risk

Department: Enterprise Risk Management

Classification: Policy & Planning Specialist 2

Job Category: Classified Staff

Job Type: Full-Time

Work Schedule: Full-time (1.0 FTE, 40 hrs/wk)

Location: Fairfax, VA

Workplace Type: Hybrid Eligible

Sponsorship Eligibility: Not eligible for visa sponsorship

Pay Band: 05

Salary: Salary commensurate with education and experience

Criminal Background Check: Yes

George Mason University’s Enterprise Risk Management (ERM) existsto promote institutional resilience by identifying, assessing, and managing risks that could affect the university’s mission. The unitalso oversees policy management and building code compliance toensure clear, consistent, and accountable governance across the institution. Through collaboration, transparency, and proactiveguidance, it supports informed decision-making and strengthens the university’s culture of integrity and risk awareness.

The Manager, University Policy and Enterprise Risk serves as thelead on development, review, approval, and renewals of university policies. This includes ensuring policies are clear, compliant, and aligned with strategic goals, while identifying, assessing, and mitigating risks that could impact operations, reputation,finances, or regulatory compliance. This is an individual contributor role with significant cross-functional leadership responsibility.

Policy Development, Management & Governance Support:

• Serves as the University Policy Manager coordinating the fulllifecycle of institutional policies, including providing information to policy owners as they draft and revise policies,providing feedback and advice to policy owners, managing the review process by the Policy Management Group, facilitating approval,publishing policies to the policy website, and archiving;
• Provides advice and guidance to policy owners regarding required processes, templates, timelines, and governancestructures;
• Maintains the policy repository and ensures version control,consistency, and clarity in policy language;
• Supports transparency by keeping the website up-to-date with current policies listed and helpful information posted to enablethe policy management process; and
• Contributes to policy management efficiency and effectivenessby updating practices and approaches to university policy management as needed.

Enterprise

Risk Management:

• Serves as a thought partner to the Chief Risk Officer (CRO) in continuous improvement of the university’s Enterprise Risk Management (ERM) framework;
• Identifies, assesses, and prioritizes institutional risksacross academic, operational, financial, regulatory, andreputational domains;
• Facilitates regular risk assessments with leadership and key stakeholders across units;
• Maintains the university’s enterprise risk register and otherkey ERM documents and data, ensuring risks are documented,evaluated, and updated regularly;
• Designs and works with risk owners to implement risk mitigation strategies and action plans to reduce exposure and strengthen organizational resilience;
• Monitors emerging risks and trends (e.g., regulatory changes,cybersecurity threats, enrollment shifts) and advises leadershipaccordingly;
• Works in partnership with the CRO to establish key risk indicators (KRIs) and metrics to track risk levels and effectiveness of mitigation efforts;
• Provides advice for integrating risk management practices into strategic planning, decision-making, and business processes;and
• Evaluates the effectiveness of existing controls and recommendsimprovements where needed.

Communication &

Collaboration:

• Works with policy owners to develop policy-specificcommunication plans;
• Promotes a risk-aware culture through training, communication,and stakeholder engagement;
• Collaborates with internal audit, compliance, legal, and policyteams to ensure alignment of risk management activities; and
• Owns project execution for policy and risk work streams,including establishing structures, tracking requests, organizing and leading meetings, and driving accountability for deliverables across cross-functional stakeholders.

Other Related Duties as Assigned:

• Related tasks assigned by the supervisor and departmenthead.