Chief Compliance and Privacy Officer; CCO

Job Summary

The Chief Compliance and Privacy Officer (CCO) serves as the senior executive responsible for overseeing and managing compliance with federal, state, and local laws and regulations as well as university policies and procedures. Reporting administratively to the President and functionally to the Board of Trustees through its Audit and Compliance Committee, the CCO provides strategic leadership in the development, implementation, and oversight of a comprehensive university-wide compliance and privacy program.

This position ensures the university maintains a culture of compliance, ethical conduct, and risk awareness while fulfilling its academic and research mission.

• Provides leadership in planning, designing, developing and continuously enhancing a comprehensive university‑wide compliance program. Implements an enterprise risk management system (or other highly effective compliance system) for overseeing and monitoring university compliance and privacy efforts, prioritizing such efforts, performing gap assessments, and working with units to develop, review and enhance their policies, standards and procedures.
• Provides leadership in coordinating the University‑wide enterprise risk management and compliance activities, including the evaluation and monitoring of the University's operational and strategic enterprise risks. Ensures that the University and its employees are complying with domestic and international regulatory requirements as well as internal policies and procedures.
• Monitors and evaluates specific compliance responsibilities and the overall effectiveness of the compliance program.
• Responds to alleged violations of rules, regulations, policies, procedures, and evaluates and recommends the initiation of investigative procedures. Develops and oversees a system for handling such violations.
• Conducts and reports on compliance and ethics activities and inquiries free of any actual or perceived impairment to the independence of the Chief Compliance Officer, and maintains timely access to any records, data, and other information in the possession or control of the University, including information reported to the University's hotline, consistent with Board of Governors Regulation 4.003.
• Initiates, manages and oversees unit compliance reviews to ensure compliance and ethics are adhered to across the University.
• Monitors regulatory and legislative matters that affect the university's compliance‑related program. Serves as a liaison with regulatory agencies as necessary. Stays current on new developments and research in the ethics and compliance arena. Leads and coordinates the regulatory change management processes.
• Identifies potential areas of compliance vulnerability and privacy risk; develops/implements corrective action plans for resolution of problematic issues and provides general guidance on how to address similar situations in the future.
• Ensures proper reporting of violations or potential violations to duly authorized law enforcement agencies as appropriate and/or required.
• Fosters a culture that promotes integrity and ethical behavior. Plans, designs, develops and directs a comprehensive university‑wide compliance program to prevent, detect and respond appropriately to compliance‑related responsibilities.
• Provides guidance to senior leadership and the Board of Trustees on compliance and privacy matters. Monitors and reports results of university compliance and privacy‑related activities to senior leadership and the Board of Trustees.
• Establishes effective working relationships to build credibility with faculty and staff to facilitate a culture of ethics, integrity and compliance. Monitors the performance of the Compliance Program and privacy‑related activities on a continuing basis, taking appropriate steps to improve its effectiveness. Promotes activities to foster compliance and privacy awareness.
• Collaborates with the Division of Human Resources in developing an effective compliance training program and privacy awareness, and oversees and ensures delivery of appropriate training and orientation to all new employees, as well as ongoing training for all faculty,…