Hybrid Information Security Compliance Analyst IV

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 84,000 - 142,000; Full time

Job summary

The University of Alabama seeks an Information Security Compliance Analyst IV to design, develop, implement, and maintain information security compliance programs, policies, procedures, and controls for research systems. Leads compliance efforts and advises senior leaders on risk and security matters.

Role includes coordinating with managed service providers, ensuring policy documentation, and applying NIST SP 800-53/171, CCMC controls, and other federal requirements in a hybrid work setting.

Qualifications

• Bachelor's degree or higher in IT or a related field.
• Experience in IT security compliance or analysis.
• Ability to obtain/maintain security clearance.
• U.S. Citizenship or U.S. Permanent Resident.
• IAT Level III certification (or ability to obtain within 6 months).

Responsibilities

• Design, develop, implement, and maintain compliance programs, policies, and controls for research systems.
• Lead compliance efforts, assessments, and remediation plans.
• Advise senior leadership on risk and security matters.
• Collaborate with managed service providers and vendors to verify policy documentation and POA&M status.

Skills

Security compliance

Risk assessment

Policy development

Communication

Project leadership

Education

Bachelor's degree

Master's degree

Associate's degree

Tools

eMASS

Job description

The University of Alabama seeks an Information Security Compliance Analyst IV to design, develop, implement, and maintain information security compliance programs, policies, procedures, and controls for research systems. Leads compliance efforts and advises senior leaders on risk and security matters.

Role includes coordinating with managed service providers, ensuring policy documentation, and applying NIST SP 800-53/171, CCMC controls, and other federal requirements in a hybrid work setting.