Director of Enterprise Risk & Compliance

We are seeking an experienced and strategic Director of Enterprise Risk & Compliance to join our team at Hively, a growing nonprofit organization with an annual budget of $70 million and a diverse portfolio of complex contracts and funding sources. The Director of Enterprise Risk & Compliance serves as a critical guardian of Hively’s organizational integrity, risk defense, and contractual obligations. Reporting directly to the Chief Financial Officer and maintaining functional dotted-line partnerships with IT and Program leadership, this role will also work closely in partnership with the Controller to ensure rigorous fiscal compliance and internal controls.

Additionally, this position will support the compliance design, monitoring, and regulatory fulfillment for major public initiatives, including responsibilities under the First 5 Alameda County Measure C Subsidized Child Care and Minimum Wage Floor Administration. This position leads the internal compliance team (Senior Contract Coordinator and Contract Coordinator), liaises with external contracted legal support, and ensures organizational compliance across all operational, technical, and financial functions.

• Strategic Leadership & Risk Management: Lead organizational risk assessments, compliance frameworks, and internal control structures in alignment with executive leadership and the ACER Committee.

• Fiscal Compliance Partnership: Work in close partnership with the Controller to maintain fiscal compliance, ensuring all grant expenditures, budget allocations, financial reporting, and tax/audit filings (including Form 990 and annual independent financial audits) strictly align with federal, state, and local donor requirements.

• Measure C Initiative Administration: Support team in designing regulatory oversight and compliance workflows for Measure C Subsidized Child Care (Contracted Slots) and Minimum Wage Floor Operating Grants ($85M+ annual program portfolio).

• Cross-Departmental Collaboration: Establish partnerships with IT and Program Department Heads to ensure operational alignment with regulatory mandates, IT security frameworks, and program deliverables.  

• Contract & Insurance Oversight: Supervise the contract lifecycle managed by the Senior Contract Coordinator and Contract Coordinator. Oversee organizational insurance portfolios, including general liability, and contract-specific insurance,

• Data Privacy & Security Governance: Partner with IT leadership on data protection standards (HIPAA, PII, PHI). Manage IT security incident reporting workflows, oversee API/system data integration protocols, and conduct periodic access and privacy audits.

• Legal & Regulatory Liaison: Serve as the primary operational liaison to contracted legal counsel on regulatory compliance, conflict of interest protocols, legal disputes, contract reviews, and governance matters. Respond to court-ordered subpoenas for information.

• Audit & Internal Controls: Design and conduct internal compliance reviews, manage corrective action plans, and support preparations with the Controller and Program Leads for external financial, programmatic, and single audits. Act as the organizational point of contact for the District Attorney's office in cases where program fraud is identified.

• Team Management & Supervision: Directly supervise, mentor, and evaluate the Senior Contract Coordinator and Contract Coordinator, building team capacity in grants and contract administration.

• Policy & Training Development: Translate complex federal, state, and local regulations into clear internal policies. Conduct staff training to foster a proactive culture of compliance, equity, safety, and fiscal integrity.

• Other projects or work as assigned.

• At least 7–10 years of progressive experience in compliance, risk management, grant oversight, or audit, preferably in a complex nonprofit or public-agency environment managing large-scale federal, state, or municipal public funding streams.

• Strong expertise in fiscal compliance, financial reporting requirements, federal regulations (OMB Circulars, 2 CFR 200), ECE subsidy structures (CalWORKs, CAPP, CCTR, CSPP), HIPAA, PII/PHI standards, and cybersecurity governance frameworks[cite: 1, 2, 3, 5].

• Demonstrated track record managing large-scale public grant/contract administration, application lifecycles, and subcontractor agreements.

• Proven experience supervising staff and managing complex contract portfolios.

• Demonstrated capability to work cross-functionally with Finance, HR,  IT, Program leadership, external public agencies, and external legal partners.

• Excellent written and verbal communication skills with the ability to convey complex regulatory and financial compliance concepts to non-technical stakeholders and public entities.

• Strong analytical and problem-solving abilities with deep attention to detail.

• Proficiency in Google Suite, grant/compliance management software, automated data extraction tools, and enterprise accounting systems (e.g., Intacct, MIP, QuickBooks).

• Passion for Hively’s mission and commitment to maintaining organizational integrity, community equity, and proper stewardship of public resources.

Preferred Knowledge, Skills and Abilities:

• Master’s degree or Juris Doctor (JD) in Law, Healthcare Compliance, Financial Management, Public Administration, Business Administration, or a related field preferred.

• Relevant professional certifications (e.g., Certified Healthcare Compliance - CHC, Certified Compliance & Ethics Professional - CCEP, Certified Public Accountant - CPA, or Certified Grants Management Specialist - CGMS) are a strong plus.

• Deep familiarity with nonprofit financial accounting standards, public grant administration, and API-driven data collection databases.