The Chief Enterprise Risk Officer (CERO) is responsible for overseeing the Internal Audit and
Compliance departments, as well as the Enterprise Risk Management (ERM) program to include
facilitating the ERM process to identify, assess, manage, monitor, and report on enterprise risks of
Moffitt’s strategy to senior leadership and the board. In consultation with Moffitt leaders, the CERO will
anticipate potential vulnerabilities and implement effective strategies to prevent or reduce the impact,
while ensuring regulatory compliance across all functions. The CERO provides related advice and
counsel to the Chief Executive Officer and other members of the executive leadership team to encourage
a culture of risk awareness. Additionally, the CERO advises Moffitt senior leadership and Board of
Directors on updates pertaining to internal controls and ERM policy.

A minimum of ten years of enterprise risk management experience, which may include overseeing
compliance or internal audit, within a large academic medical center, health system or similar health care
organization, with at least eight years in a progressive leadership capacity.