Compliance Analyst III

Southern Illinois University Carbondale; Carbondale (IL); On-site; USD 75,000 - 110,000; Full time

Job summary

Southern Illinois University Carbondale seeks a Compliance Analyst III to lead complex IT governance, risk, and compliance activities across systems and third‑party environments. The role interprets regulatory and contractual requirements and translates them into actionable risk and compliance work, collaborating with IT, procurement, legal, privacy, and other units.

The position requires independent judgment within defined frameworks and is responsible for audit readiness, risk management, and

Qualifications

• independently conduct complex IT, data protection, and regulatory compliance assessments
• coordinates internal and external audit engagements
• provides guidance to project teams and system owners on compliance requirements
• interprets regulatory, contractual, and institutional requirements and translates them into risk activities
• monitors changes in regulatory requirements and prepares risk summaries

Responsibilities

• Scopes, plans, and executes IT, data protection, and regulatory assessments
• Coordinates audit activities including evidence collection and remediation tracking
• Advises teams on compliance requirements throughout system lifecycles
• Aligns compliance with project governance and artifact requirements
• Tracks regulatory and policy changes and informs leadership
• Prepares compliance status reports and risk summaries
• Escalates high-risk or nonstandard issues for leadership review

Skills

IT governance

risk analysis

audit coordination

stakeholder communication

policy interpretation

Education

Bachelor's degree in Information Systems / Cybersecurity or related field

Tools

IT-GRC tools

Job description

This position performs advanced professional work in support of the University’s IT governance, risk, and compliance (IT-GRC) program. The Compliance Analyst III is responsible for independently conducting complex compliance assessments, coordinating audit activities, and providing functional leadership across assigned compliance domains. The role interprets regulatory, contractual, and institutional requirements and translates them into actionable risk and compliance activities across systems, services, and third‑party environments.

The position collaborates extensively with IT, procurement, legal, privacy, and functional units to ensure compliance requirements are consistently applied and aligned with institutional governance processes. The incumbent exercises independent judgment within broadly defined frameworks and provides guidance to stakeholders to support audit readiness, risk management, and compliance maturity.

Example of Duties:

• Conducts and Oversees Compliance Assessments: Independently scopes, plans, and executes complex IT, data protection, and regulatory compliance assessments; evaluates risks and control gaps; and documents findings and recommended mitigation strategies.
• Coordinates Audit Activities: Serves as a primary coordinator for Internal and External Audit engagements, including planning, documentation collection, response development, and remediation tracking. Performs Contract and Third‑Party Risk Review: Evaluates IT contracts and vendor documentation for security, privacy, and data protection requirements; identifies risks and provides structured recommendations to support decision‑making.
• Provides Compliance Guidance to Stakeholders: Advises project teams, system owners, and service managers on compliance requirements and risk considerations throughout the system lifecycle.
• Aligns Compliance with Project Governance: Coordinates compliance activities within established project management processes to ensure required reviews, approvals, and artifacts are completed.
• Monitors Regulatory and Policy Changes: Tracks changes in regulatory, contractual, and institutional requirements; summarizes impacts and assists with implementation planning.
• Prepares Reports and Risk Summaries: Develops compliance reports, audit summaries, and risk documentation to support leadership awareness and decision‑making.
• Escalates High‑Risk or Nonstandard Issues: Identifies and escalates policy exceptions, high‑risk findings, or complex issues requiring leadership review and risk acceptance.

Salary is competitive and commensurate with qualifications and experience, while also considering internal equity.

• Provide functional leadership and coordination of assigned IT governance, risk, and compliance domains, including establishing priorities, sequencing work, and ensuring consistent execution across stakeholders.
• Conduct and oversee complex IT, data protection, and regulatory compliance assessments in accordance with institutional policies, contractual obligations, legislative mandates, and applicable standards.
• Independently determine assessment scope, methodology, and risk prioritization for complex systems, services, and third‑party environments; document risks, gaps, and recommended mitigation strategies.
• Serve as the primary coordinator for Internal Audit and External Audit activities within assigned compliance domains, including planning, evidence coordination, response development, and remediation tracking.
• Review and analyze IT contracts and vendor terms for security, privacy, and data protection requirements; prepare structured risk assessments and influence contract risk acceptance decisions through clearly articulated risk positions and mitigation strategies, in coordination with Procurement and IT leadership.
• Define audit response approach, interpret control requirements, and guide stakeholders in developing complete, accurate, and defensible responses.
• Monitor changes in regulatory, contractual, and institutional requirements; interpret applicability and summarize impacts for leadership and stakeholders.
• Contribute expert analytical input to the review, maintenance, and implementation of IT governance, data classification, and compliance policies and standards.
• Provide compliance and risk guidance to project teams, system owners, and service managers to support alignment with governance requirements throughout the system lifecycle.
• Align compliance activities with established project management governance practices by coordinating with project coordinators and resources to ensure required compliance artifacts, reviews, and approvals are incorporated into project lifecycles.
• Prepare compliance status reports, risk summaries, and decision support materials for leadership review.
• Identify non standard, high risk, or exception based issues and ensure appropriate escalation through established governance and risk management processes.
• Collaborate with IT, procurement, legal, privacy, and functional partners to support consistent, risk aware decision making and continuous improvement of compliance practices.

Illinois Residency Requirement: Pursuant to the State Universities Civil Service System, out-of-state candidates must establish Illinois residency within 180 calendar days of the start date for this position.

1. High school diploma or equivalent.
2. Any one or any combination totaling two (2) years (24 months) from the following categories:
3. A. College course work which includes Information Systems and Technologies, Computer Science, Cybersecurity, Business, Management, Analytics, or a closely related discipline, as measured by the established conversion table or its proportional equivalent.
4. • 30 semester hours equals one (1) year (12 months)
   • Associate's Degree (60 semester hours) equals eighteen months (18 months)
   • 90 semester hours equals two (2) years (24 months)
   • Bachelor's Degree (120 semester hours) equals three (3) years (36 months)
5. B. Progressively more responsible professional experience in IT compliance, governance, risk analysis, audit, audit coordination, third‑party assessment, project management, financial and banking activities, and/or contract‑related review activities.
6. One year of demonstrated experience performing complex IT compliance or risk analysis activities within a large or complex organizational environment, including environments subject to financial, privacy, or regulatory oversight.
7. One year of experience coordinating or leading audit and compliance activities, including documentation management, evidence collection, and remediation tracking.
8. Ability to interpret regulatory, contractual, and institutional requirements and clearly communicate impacts and risks to technical and non technical stakeholders.
9. NOTE: Relevant experience may include work performed within regulated industries such as banking, financial services, healthcare, higher education, or other environments subject to data protection and regulatory compliance requirements.

Sponsorship for Work Authorization is not available. For more information visit https://policies.siu.edu/policies/employment-non-us-citizens.php. This position is not eligible for employer-sponsored work authorization. Applicants must be legally authorized to work in the United States without the need for current or future university sponsorship to be considered for this role.

About Civil Service Examination/Testing:

The Civil Service examination for this classification is based on your application materials and responses to the supplemental questions. No participation other than submission of application materials is required from applicants that qualify to take the exam. If you meet the minimum required qualifications for this position, your application will move forward for examination/testing in which you will receive a score calculated based on your education and experience, and your name will be placed on the active employment register by exam score. This score will be emailed to the email address noted on your application. After the application deadline, the names within the top three scores will be referred to the department for interview.