Risk and Compliance Associate

Role Overview

This position supports the University’s risk management function by conducting compliance reviews and assessing whether existing risk policies are being put into practice effectively across departments. The role involves analysing emerging risk areas, tracking the implementation of corrective actions, and advising managers on how to meet regulatory expectations. This work is essential to safeguarding the University’s operations, reputation, and commitment to sound governance.

Key Responsibilities

• Carry out structured compliance reviews across academic and administrative functions to determine how well risk management policies are understood and applied.
• Contribute to an institution-wide view of the University’s risk profile, including supporting the development of risk appetite statements and related reporting.
• Work with department heads to keep the institutional risk register current, monitor the progress of action plans, and confirm that agreed mitigation measures are completed.
• Test the design and operational effectiveness of controls used within the risk management framework, flagging gaps and recommending practical improvements.
• Investigate actual or suspected non-compliance with laws, regulations, University policies, and accreditation standards, documenting findings and following up on resolutions.
• Assist in drafting, reviewing, and updating risk management and compliance policies to ensure they remain clear, accessible, and aligned with current requirements.
• Coordinate and deliver training sessions that help faculty, staff, and students understand their risk and compliance responsibilities and stay aware of regulatory updates.
• Prepare regular reports on risk and compliance activity for University leadership, and support both internal and external audit processes as required.

Requirements & Qualifications

• Bachelor’s degree in law, risk management, business administration, or a closely related field.
• Professional certification or qualification in at least one of the following: ICIFA, CISA, CISI, CRM, CISM, or CPA.
• A minimum of 1–3 years of relevant work experience in risk management, compliance monitoring, or internal audit.
• Solid understanding of risk management frameworks, regulatory compliance principles, and internal control concepts.
• Strong analytical and problem-solving skills, with the ability to identify root causes and recommend workable solutions.
• Excellent written and verbal communication skills, including the ability to explain technical risk and compliance matters to non-specialists.
• Proficiency in Microsoft Office applications and experience working with risk registers or compliance tracking tools.