POSITION OBJECTIVE

The Executive Director of Audit Services plans and directs a program of internal auditing and Enterprise Risk Management within the Case Western Reserve University. The comprehensive risk-based internal audit program includes, but is not limited to, complex audits of financial, operational, compliance, internal control, and construction, as well as fraud investigations and information system-related issues. The functions of the department are defined by the Audit Committee of the Board of Trustees. Primary duties include 1) examining and evaluating the adequacy and effectiveness of the university's system of internal controls; 2) furnishing the audit committee and management with objective and timely analysis, assessments, recommendations, advice, information, and assurance to assist them in the effective and efficient discharge of their responsibilities; 3) auditing liquid and fixed resources to verify that they are fully accounted for; 4) reviewing and appraising the efficiency and effectiveness with which resources are employed in the internal control structure; and 5) directing the University’s ERM program.

ESSENTIAL FUNCTIONS

1. Develop and promote an enterprise risk management model to manage risk and internal control throughout the university. Develop and administer a risk assessment methodology that covers financial, operational, compliance and reputational risks. Coordinate annually with co-sourced internal audit, Deloitte, to administer a formal university-wide risk assessment. Prepare a comprehensive 3-year strategic plan for audit coverage based on a university-wide risk assessment and present it to the audit committee for review and approval. Lead the university in adopting “best practices” from the Sarbanes-Oxley Act. Maintain enterprise risk management dashboard and report progress to the enterprise risk management committee, audit committee and president’s cabinet. Prepare annual ERM assessment and identify Top 10 risks for the University. Identify and engage respective owners of the Top 10 enterprise risks in developing risk remediation plans. Facilitate collaboration with general counsel, chief compliance officer, research compliance, human resources, university technology, internal audit (Deloitte), etc. in executing the enterprise risk management plan. Create and maintain, through collaboration with management, a formal risk appetite statement for the university. (30%)
2. Prepare and present a regular report to the audit committee of the board of trustees. Present ad-hoc reports as appropriate to other committees of the board of trustees, such as the finance committee. work independently with university leadership on internal control projects. lead the organization and coordination of audit committee meetings, including the creation and presentation of most material. Work independently with the chair of the audit committee of the board of trustees in developing and preparing the audit committee meeting agenda items and reports, including meeting with the chair before each audit committee meeting to review enterprise risk management. Perform special audits, projects, or reviews at the request of the audit committee or management. Coordinate with the chief finance officer regarding communications to the audit committee. Provide management and the audit committee with the results of audit activity and adjust audit activity to improve the audit program and audit coverage. (25%)
3. Identify activities for which internal controls are subject to audit coverage, evaluate their significance and the degree of risk inherent in the activity. Establish priorities and schedules for audit engagements. Assign resources appropriately based on risks. Develop and implement an audit work plan for the evaluation of the adequacy and effectiveness of the university’s system of internal controls. Evaluate the reliability of financial and other relevant operational information and the means used to identify, measure, classify and report such information. Audit compliance with policies, plans, procedures, laws, and regulations. Evaluate the means used to safeguard assets from loss. Establish means to detect fraud, waste, and abuse of resources. Develop a system of cost and schedule control over audit projects. Utilize work methods, tools and technology that are current with the state of the profession. Assure that audits are performed in accordance with standards set forth by the Institute of Internal Audits (IAA), the United States General Accountability Office (GAO), and the Information Systems Audit and Control Association (ISACA). Lead annual assessments of risk management plans with the president’s cabinet, deans (schools) and functional units (non-academic departments). (25%)
4. Recommend changes in policies or procedures to increase efficiency of operations or to improve safeguards over university assets. Recommend steps to reengineer processes to improve fiscal policy and strengthen internal controls. Assess in the formulation of accounting and information technology policies. Participate in the development of university policies and procedures. (10%)
5. Monitor the completion and authorize the distribution of reports on the results of audits, including appropriate recommendations for improvements. Coordinate an ongoing review process that tracks and appraises the implementation of audit recommendations. Assess the adequacy of the actions taken to implement recommendations. (10%)

NONESSENTIAL FUNCTIONS

Direct activities and administrative responsibilities of the function: Serve as a consultant to other departments when questions pertaining to internal control or procedures arise. Coordinate fraud investigations with law enforcement, attorneys, and private investigators. Perform internal fraud inquiries and investigations. Administer, monitor, and investigate reports submitted to the anonymous integrity hotline. Keep abreast of university policies and procedures, current developments in accounting and auditing professions, and changes in local, state, and federal laws, as applicable. Coordinate activities with the University’s external auditors. Establish effective communication with internal and external entities, including consultants. Perform other duties as assigned. (<1%)

CONTACTS

Department: At least weekly contact with supervisor to review and update statues of audit plan progress and results, updates to ERM program and other special ad hoc projects.

University: Regular, recurring contact with University President, administrators, President’s Cabinet, Deans, faculty and other staff, University committees, Compliance Office, HR and OGC as required to assess risks, plan, and perform the internal audit work plan. Regular contact with the Board of Trustees – report to the Audit Committee of the Board of Trustees during its regularly scheduled meetings, tri-annual pre-Audit Committee meetings with the Chair of the Audit Committee, and ad hoc Committee meetings (i.e., Finance Committee).

External: Contact with officers of university subsidiaries, external audit firms, governmental and regulatory agencies, professional organizations, actuaries, vendors, service providers, consultants and peers at other similar higher education institutions as required to plan and perform the internal audit work plan and enhance the ERM program.

Students: Little or no contact with students.

SUPERVISORY RESPONSIBILITY

No direct supervision of staff employees. Coordinate the activities and reviews the annual work plan and reports of the outsourced internal audit firm (Deloitte).

QUALIFICATIONS

Experience: 10 or more years of experience directly related to the principal functions of the position. Higher education experience required. National public accounting preferred. Experience should include 5 years of management experience.

Education/Licensing: Bachelor’s degree in finance or accounting required; advance degree (or MBA) preferred. CPA license required additional other credential preferred (e.g., CFE).

REQUIRED SKILLS

1. Demonstrated understanding of enterprise risk management and experience in managing and advancing an organization in an enterprise risk management model.
2. Ability to meet consistent attendance.
3. Ability to interact with board of trustees, president, administration, colleagues, supervisors, and customers face to face.
4. Project management.
5. Investigative and interviewing.
6. Quantitative analysis / statistical analysis.
7. Public speaking and report presentation.
8. Software proficiency in M/S Office, GOOGLE apps, etc.
9. Teambuilding in a co-sourced environment.

WORKING CONDITIONS

General office environment.

In employment, as in education, Case Western Reserve University is committed to Equal Opportunity and Diversity.  Women, veterans, members of underrepresented minority groups, and individuals with disabilities are encouraged to apply.

.

Case Western Reserve University provides reasonable accommodations to applicants with disabilities.  Applicants requiring a reasonable accommodation for any part of the application and hiring process should contact the Office of Equity at 216-368-3066 to request a reasonable accommodation.  Determinations as to granting reasonable accommodations for any applicant will be made on a case-by-case basis.

.