Policy and Risk Specialist

About the Department:

George Mason University’s Enterprise Risk Management (ERM) exists to promote institutional resilience by identifying, assessing, and managing risks that could affect the university’s mission. The unit also oversees policy management and building code compliance to ensure clear, consistent, and accountable governance across the institution. Through collaboration, transparency, and proactive guidance, it supports informed decision-making and strengthens the university’s culture of integrity and risk awareness.

About the Position:

The Policy and Risk Specialist strengthens organizational effectiveness by coordinating the development, review, and maintenance of institutional policies while supporting the identification, assessment, and mitigation of enterprise-level risks.

Responsibilities:

Policy Development, Management & Governance Support:

• Serve as University Policy Manager coordinating the full lifecycle of institutional policies, including providing information to policy owners as they draft and revise policies, supporting review by the Policy Management Group, facilitating approval, publishing policies to the policy website, and archiving;
• Guide policy owners through required processes, templates, timelines, and governance structures;
• Maintain the policy repository and ensure version control, consistency, and clarity in policy language;
• Support transparency by keeping the website up-to-date with current policies listed and helpful information posted to enable the policy management process; and
• Contribute to policy management efficiency and effectiveness by contributing ideas and raising concerns with the Policy Management Group co-chairs.

ERM Support:

• Prepare draft materials for meetings and presentations focused on ERM, as well as coordinating AV support as needed and taking notes and preparing meeting minutes;
• Prepare clear, consistent, and professional materials in support of the ERM program including contributing to web content;
• Serve as project manager, tracking and coordinating requests and follow up with Executive Risk Owners and Action Plan Risk Owners for content, updates, and feedback; and
• Utilize technology in support of the ERM program including inputting data, preparing reports, utilizing analysis capabilities, and assisting risk owners in providing information to the system as applicable.

Administrative, Data, and Reporting Support:

• Support development of guidance documents and materials related to the policy process and ERM;
• Support communication by maintaining list-serves and sending communication on behalf of the Policy Management Group and on behalf of ERM;
• Schedule complex meetings such as Policy Management Group meetings, ERM Council meetings, meetings with senior leadership team members, working groups, and similar;
• Maintain accurate documentation, meeting minutes, schedules, and tracking systems for ERM and policy workflows;
• Support the preparation of reports for senior leadership, auditors, and governance bodies;
• Assist with data management, analysis, and process-improvement across the unit; and
• Support development of training materials for ERM, policy, and other related areas as they emerge.

Other Related Duties as Assigned:

• Related tasks assigned by the supervisor and department head.

Required Qualifications:

• Bachelor’s degree in related field, or equivalent combination of education and experience;
• Typically, 3-5 years of professional experience in policy development, risk management, compliance, project management, governance, or a related administrative or analytical role;
• Experience supporting complex processes involving multiple stakeholders, such as policy review cycles, compliance workflows, or cross departmental initiatives;
• Experience preparing reports, documentation, or communication for leadership or governance bodies;
• Knowledge of processes for developing and implementing policies, procedures and ERM strategies, including drafting, revision, governance structures, and approval workflows within complex organizations;
• Knowledge of software frequently used by ERM including Microsoft Suite (SharePoint, Teams, Word, Excel, PowerPoint, etc.), DocuSign, and the Adobe Suite;
• Skill in coordinating meetings, responding to requests and questions, and supporting stakeholders through structured processes;
• Skill in written communication, including the ability to create clear, concise, and accessible documents, reports, and guidance materials;
• Skill in project management, including prioritizing tasks, managing timelines, and coordinating multiple assignments;
• Skill in using digital tools and systems for document management, workflow tracking, and data analysis;
• Ability to build and maintain collaborative working relationships across diverse units and stakeholder groups;
• Ability to handle sensitive or confidential information with discretion, professionalism, and sound judgment;
• Ability to work independently and proactively while also contributing effectively to team initiatives;
• Ability to adapt to changing priorities, emerging risks, and evolving organizational needs; and
• Other attributes include a commitment to integrity, accountability, and transparency in policy and risk processes; a strong customer-service orientation and willingness to support colleagues navigating complex governance workflows; attention to detail and a dedication to continuous improvement in both policy management and risk practices; and professional curiosity, openness to learning, and the ability to thoughtfully question assumptions.

Preferred Qualifications:

• Master’s degree in related field;
• Typically, 5-7 years of experience in policy management, enterprise risk management, compliance coordination, or organizational governance-preferably in higher education or a similarly complex organization;
• Experience working with governance committees, policy owners, auditors, or risk stewards;
• Experience developing training materials, processing documentation, or guidance related to policy, compliance, or risk practices;
• Experience using project management or risk tracking tools, workflow systems, or document management platforms;
• Experience interpreting regulatory or accreditation requirements relevant to institutional policy and compliance environments;
• Knowledge of enterprise risk management principles, including risk identification, assessment, mitigation, and monitoring;
• In-depth knowledge of at least one risk area (strategic, operational, financial, compliance, or reputational);
• Knowledge of regulatory, compliance, and accreditation requirements relevant to institutional policies and risk oversight;
• Knowledge of organizational governance frameworks and best practices for policy clarity, consistency, and accessibility;
• Knowledge of research methods, data interpretation, and analytical techniques used in evaluating risk and policy impacts;
• Knowledge of higher education governance structures, administrative operations, or accreditation systems;
• Knowledge of federal and state regulatory frameworks related to compliance, risk management, privacy, or institutional policy oversight;
• Knowledge of project management methodologies such as Agile, Lean, or continuous improvement practices;
• Knowledge of data visualization tools or risk tracking platforms used in enterprise risk environments;
• Skill in analyzing complex information, identifying trends or gaps, and translating findings into clear recommendations;
• Skill in preparing and/or implementing training initiatives; and
• Ability to interpret policies, procedures, and regulatory requirements and apply them accurately to institutional situations.

Instructions to Applicants:

For full consideration, applicants must apply for the Policy and Risk Specialist at https://jobs.gmu.edu/. Complete and submit the online application to include three professional references with contact information, and provide a cover letter and resume for review.