Manager, University Policy and Enterprise Risk

Department: Enterprise Risk Management

Classification: Policy & Planning Specialist 2

Job Category:Classified Staff

Job Type:Full-Time

Work Schedule:Full-time (1.0 FTE, 40 hrs/wk)

Location: Fairfax, VA

Workplace Type:Hybrid Eligible

Sponsorship Eligibility:Not eligible for visa sponsorship

Pay Band:05

Salary:Salary commensurate with education and experience

Criminal Background Check:Yes

George Mason University’s Enterprise Risk Management (ERM) exists to promote institutional resilience by identifying, assessing, and managing risks that could affect the university’s mission. The unit also oversees policy management and building code compliance to ensure clear, consistent, and accountable governance across the institution. Through collaboration, transparency, and proactive guidance, it supports informed decision‑making and strengthens the university’s culture of integrity and risk awareness.

The Manager, University Policy and Enterprise Risk serves as the lead on development, review, approval, and renewals of university policies. This includes ensuring policies are clear, compliant, and aligned with strategic goals, while identifying, assessing, and mitigating risks that could impact operations, reputation, finances, or regulatory compliance. This is an individual contributor role with significant cross-functional leadership responsibility.

Policy Development, Management & Governance Support:

• Serves as the University Policy Manager coordinating the full lifecycle of institutional policies, including providing information to policy owners as they draft and revise policies, providing feedback and advice to policy owners, managing the review process by the Policy Management Group, facilitating approval, publishing policies to the policy website, and archiving;
• Provides advice and guidance to policy owners regarding required processes, templates, timelines, and governance structures;
• Maintains the policy repository and ensures version control, consistency, and clarity in policy language;
• Supports transparency by keeping the website up-to-date with current policies listed and helpful information posted to enable the policy management process; and
• Contributes to policy management efficiency and effectiveness by updating practices and approaches to university policy management as needed.

Enterprise

Risk Management:

• Serves as a thought partner to the Chief Risk Officer (CRO) in continuous improvement of the university’s Enterprise Risk Management (ERM) framework;
• Identifies, assesses, and prioritizes institutional risks across academic, operational, financial, regulatory, and reputational domains;
• Facilitates regular risk assessments with leadership and key stakeholders across units;
• Maintains the university’s enterprise risk register and other key ERM documents and data, ensuring risks are documented, evaluated, and updated regularly;
• Designs and works with risk owners to implement risk mitigation strategies and action plans to reduce exposure and strengthen organizational resilience;
• Monitors emerging risks and trends (e.g., regulatory changes, cybersecurity threats, enrollment shifts) and advises leadership accordingly;
• Works in partnership with the CRO to establish key risk indicators (KRIs) and metrics to track risk levels and effectiveness of mitigation efforts;
• Provides advice for integrating risk management practices into strategic planning, decision-making, and business processes; and
• Evaluates the effectiveness of existing controls and recommends improvements where needed.

Communication &

Collaboration:

• Works with policy owners to develop policy-specific communication plans;
• Promotes a risk-aware culture through training, communication, and stakeholder engagement;
• Collaborates with internal audit, compliance, legal, and policy teams to ensure alignment of risk management activities; and
• Owns project execution for policy and risk work streams, including establishing structures, tracking requests, organizing and leading meetings, and driving accountability for deliverables across cross-functional stakeholders.

Other Related Duties as Assigned:

• Related tasks assigned by…