Cybersecurity & IT Compliance Analyst

Northern Virginia Community College; Fairfax (VA); On-site; USD 95,000 - 105,000; Full time

Job summary

NOVA is seeking an IT Compliance Analyst to safeguard the college's digital assets by implementing, monitoring, and maintaining cybersecurity controls and compliance processes. The role ensures that IT systems, processes, and data practices comply with federal and state regulations, industry standards, and institutional policies.

The position emphasizes regulatory compliance, policy management, and risk assessment with a focus on FERPA, HIPAA, PCI DSS, and CIS Controls; vendor risk management

Qualifications

• Knowledge of IT cybersecurity and privacy principles, including control requirements of FERPA, HIPAA, PCI DSS, GLBA, CIS Controls.
• Analytical skills for reviewing policies, procedures, and standards; risk assessments and evidence management.
• Ability to collaborate with technical teams, vendors, and third-party providers to validate controls and collect compliance evidence.
• Experience administering security awareness and compliance training programs and tracking completion.
• Hands-on experience with security, compliance, or administrative tools.

Responsibilities

• Regulatory Compliance & Policy Management: review and version control cybersecurity policies and supporting docs.
• Vendor & Third-Party Risk Management: maintain TPRM policies and processes.
• Security Assessments & Internal Controls: track gaps and prepare readiness reports for IT leadership.
• Training & Awareness: develop and deliver IT compliance and data privacy training (FERPA, cybersecurity); monitor completion rates.
• Risk Management & Data Privacy: conduct IT risk assessments and Privacy Impact Assessments.

Skills

Clear technical reporting

IT cybersecurity principles

Policy & documentation review

Cross-functional collaboration

Stakeholder communication

Education

Knowledge of FERPA HIPAA PCI DSS GLBA CIS Controls

Tools

KnowBe4

SOC 2 reports

TeamDynamix

Job description

NOVA is seeking an IT Compliance Analyst to safeguard the college's digital assets by implementing, monitoring, and maintaining cybersecurity controls and compliance processes. The role ensures that IT systems, processes, and data practices comply with federal and state regulations, industry standards, and institutional policies.

The position emphasizes regulatory compliance, policy management, and risk assessment with a focus on FERPA, HIPAA, PCI DSS, and CIS Controls; vendor risk management