Vice President Audit, Compliance, Ethics and Risk Management

Job Summary

The Vice President of Audit, Compliance, Ethics, and Risk Management (VP-ACERM) is a senior leader charged with safeguarding Augusta University's integrity, accountability, and operational resilience. This role provides strategic leadership and oversight across five critical domains:
Internal Audit, Ethics & Compliance, Enterprise Risk Management, Privacy, and Environmental Health & Safety (EH&S). The VP ensures that Augusta University operates in full alignment with federal and state laws, University System of Georgia (USG) policies, and the highest ethical standards.

• Principal Accountabilities:
  • Creation, oversight, and strategic management of the Internal Audit, Compliance, Privacy, Environmental Health and Safety, Ethics, and Risk Management departments, serving as Chief Compliance Officer. Reports to the President and works directly with the Office of Internal Audit, Ethics & Compliance at the University System of Georgia to implement systematic audit, risk management, controls, and governance processes.
• Internal Audit:
  • Oversee an internal audit program that evaluates financial, operational, and compliance controls and follows up to ensure management has implemented corrective actions.
  • Ensure high-quality internal audit and advisory services, including development and execution of an annual comprehensive risk‑based audit plan in accordance with professional standards.
  • Present findings and strategic recommendations to executive leadership.
  • Ensure compliance with applicable laws, regulations, and university policies.
  • Oversee fraud investigations and whistle blower protections.
• Ethics & Compliance:
  • Direct the university‑wide ethics and compliance program, including policy development, training, and monitoring.
  • Oversee investigations into misconduct, retaliation, and ethical violations and ensure management follows up on corrective actions.
  • Review and strengthen existing processes and systems to measure, monitor, and mitigate risk, and provide recommendations to improve operations.
  • Collaborate with accountable institutional offices to ensure compliance with applicable laws, regulations, and university policies.
• Enterprise
  
  Risk Management:
  • Oversee the development and maintenance of a comprehensive ERM framework that identifies, assesses, and mitigates strategic, operational, financial, and reputational risks.
  • Facilitate cross‑functional risk assessments and scenario planning.
  • Advise senior leadership on emerging risks and mitigation strategies.
  • Integrate risk management into institutional planning and decision‑making.
• Privacy Governance:
  • Ensure compliance with HIPAA, FERPA, GDPR, and other applicable privacy laws.
  • Oversee the development of privacy policies, training programs, and incident response protocols.
  • Lead investigations of data breaches and coordinate with IT, legal counsel, and clinical operations.
  • Promote a privacy‑aware culture across academic and clinical units.
• Environmental Health & Safety (EH&S):
  • Oversee EH&S programs to ensure compliance with OSHA, EPA, and state regulations.
  • Promote a safe and healthy campus through proactive risk assessments, emergency preparedness, and safety training.
  • Oversee the Institutional Biosafety Committee and Chemical Safety Committee.
  • Promote initiatives to improve campus safety, sustainability, and environmental stewardship.
• Regulatory Affairs & Institutional Integrity:
  • Ensure institutional alignment with USG policies and federal/state regulations.
  • Liaise with external agencies, including the Department of Education and state auditors.
  • Monitor regulatory changes and assess institutional impact.
  • Promote ethical leadership and decision‑making across all levels of the university.
  • Assist the President, Cabinet members, and other leaders in cultivating an ethical culture.
  • Partner with key stakeholders to respond to inquiries, audits, or investigations.
  • Develop and monitor AU Enterprise Risk Policies and report major risks to executive leadership and governing bodies.
  • Establish an integrated risk management framework and collaborate with management in risk mitigation plans.
  • Conduct enterprise risk assessments and implement risk metrics and reports.
  • Communicate…