Information Security Compliance Analyst

UVA Information Technology Services (ITS) is seeking an Information Security Risk Compliance Analyst to join the Information Security (InfoSec) Compliance team. Reporting to the Information Security Officer - Governance, Risk and Compliance, the Analyst will perform security and compliance reviews of IT solutions used to access UVA data. The Analyst will serve as a technical resource for UVA business units implementing or procuring solutions that touch sensitive data and/or IT resources across the University. The ideal candidate will be highly detail-oriented and self-driven, with a fundamental working technical knowledge of server and endpoint management, both on prem and in a cloud computing environment. The successful Analyst will be solutions-oriented and leverage interpersonal skills to build numerous professional relationships and develop an intimate knowledge of secure technical solutions that will support the business processes and missions of numerous UVA departments, schools, and UAOs.

ITS at UVA is a phenomenal place to lead, grow, and deliver impact. It's an organization that values results and teamwork. We like the people we work with and the work we get to do. We strive to create a welcoming and supportive workplace where everyone feels empowered to be their authentic selves and share ideas. We are committed to fostering a welcoming environment where everyone feels valued and respected. ITS values work-life balance and provides flexible work location options where possible. Please see additional information aboutjoining our team.

Benefits Include: The choice between 3 different health plans; vision and dental insurance; life insurance; benefits savings accounts; starting with 22 days of paid time off a year in addition to 12 or more paid holidays; 8 weeks of paid parental leave; short term disability; up to $4,360 after your first year for combined use of tuition toward a degree-seeking program or up to $2,000 for professional development including classes, certification training and conferences; and more!

This position will be a flexible hybrid role.

Please see additional information about joining our team.

What you will do:

• Communicate effectively both in writing and verbally with both non-technical managers and front-line technical support providers to pursue secure and compliant IT solutions.
• Review solutions for compliance with UVA policy, standards, and procedures and for consistency with cybersecurity industry best practices and/or recommended security frameworks.
• Work independently and with larger teams to manage complex projects from start to finish.
• Operate in a highly technical environment to provide security compliance analysis effectively and efficiently to various schools and units across the academic division.
• Provide risk assessments based on legal and regulatory requirements often with limited resources and against tight timelines.
• Provide advanced, strategic support mitigating the risks and vulnerabilities for the Institute in compliance with state and federal laws, regulatory compliance requirements, and the University policies and procedures.
• Review system-related information security plans and IT Risk Management results to provide departments recommendations to align better with the University security, privacy practices, and legal and industry regulations.
• Work with InfoSec management to research and develop accurate responses to audits and external assessments.
• Maintain current working knowledge of IT-related University policies, standards, and procedures and relevant state and federal legal and regulatory requirements, including FERPA, HIPAA, GLBA, and CUI.
• Maintain current working knowledge of relevant technologies as assigned.

Salary $75,000-90,000 a year

Required Qualifications:

• High School Diploma and at least 3 years of experience with management of endpoints and/or servers
• Highly detail-oriented and self-driven
• Solutions-oriented with the ability to leverage interpersonal skills to build numerous professional relationships

Preferred Qualifications:

• Relevant experience in a higher education environment

TO APPLY:

Complete an application online and attach:

1. Cover letter to include your interest in the position and your knowledge, skills, abilities, and experiences

2. Resume or CV

***Please note that you MUST upload ALL documents into the CV/Resume box. Applications that do not contain all of the required documents will not receive full consideration. ***

PROCESS FOR INTERNAL UVA APPLICANTS: Please apply through your Workday Home page, search "Find Jobs", and search for R0071703 .

PROCESS FOR EXTERNAL APPLICANTS: Please visit UVA job board: https://uva.wd1.myworkdayjobs.com/UVAJobs and search for R0071703

For questions about the application process, please contact Bill Crane , Senior Academic Recruiter Xer5ff@virginia.edu

MINIMUM REQUIREMENTS

Education: High School Diploma, Associate's Degree Preferred.
Experience: 3 years of experience.
Licensure: None.

PHYSICAL DEMANDS

This is primarily a sedentary job involving extensive use of desktop computers. The job does occasionally require traveling some distance to attend meetings, and programs.

The University of Virginia, including the UVA Health System which represents the UVA Medical Center, Schools of Medicine and Nursing, UVA Physicians Group and the Claude Moore Health Sciences Library, are fundamentally committed to the diversity of our faculty and staff. We believe diversity is excellence expressing itself through every person's perspectives and lived experience. We are equal opportunity employers. All qualified applicants will receive consideration for employment without regard to age, color, disability, gender identity or expression, marital status, national or ethnic origin, political affiliation, race, religion, sex, pregnancy, sexual orientation, veteran or military status, and family medical or genetic information.