Information Security Compliance Analyst IV - 530713

The University of Alabama; Tuscaloosa (AL); Hybrid; USD 84,000 - 142,000; Full time

Job summary

The University of Alabama seeks an Information Security Compliance Analyst IV to design, develop, implement, and maintain information security compliance programs, policies, procedures, and controls for research systems. Leads compliance efforts and advises senior leaders on risk and security matters.

Role includes coordinating with managed service providers, ensuring policy documentation, and applying NIST SP 800-53/171, CCMC controls, and other federal requirements in a hybrid work setting.

Qualifications

• Bachelor's degree or higher in IT or a related field.
• Experience in IT security compliance or analysis.
• Ability to obtain/maintain security clearance.
• U.S. Citizenship or U.S. Permanent Resident.
• IAT Level III certification (or ability to obtain within 6 months).

Responsibilities

• Design, develop, implement, and maintain compliance programs, policies, and controls for research systems.
• Lead compliance efforts, assessments, and remediation plans.
• Advise senior leadership on risk and security matters.
• Collaborate with managed service providers and vendors to verify policy documentation and POA&M status.

Skills

Security compliance

Risk assessment

Policy development

Communication

Project leadership

Education

Bachelor's degree

Master's degree

Associate's degree

Tools

eMASS

Job description

Pay Grade/Pay Range:

Minimum: $83,500 - Midpoint: $112,700 (Salaried E13)

Department/Organization:

200721 - Enterprise Technology

Normal Work Schedule:

Monday - Friday 8:00am to 5:00pm

Note to Applicants:

Position is eligible for hybrid work subject to University policy.

Job Summary:

The Information Security Compliance Analyst IV designs, develops, implements, and maintains information security compliance programs, policies, procedures, and controls for research systems. Leads and oversees compliance efforts to ensure adherence to federal, state, sponsor, and organizational requirements. Leads security control and risk assessments and validates compliance findings and remediation plans. Develops and documents compliance strategies for secure research environments. Serves as an escalation point for complex compliance issues. Provides expert guidance on remediation strategies. Advises senior leaders on compliance matters and security risks.

Additional Department Summary:

Works with managed service providers and vendors to verify policy and procedure documentation, security control implementation, and Plans of Action and Milestone (POA&M) status.

Required Minimum Qualifications:

High school diploma or GED and ten (10) years of IT experience to include four (4) years of IT security compliance or analysis experience; OR associate's degree and eight (8) years of IT experience to include four (4) years of IT security compliance or analysis experience; OR bachelor's degree and six (6) years of IT security compliance or analysis experience; OR master's degree and four (4) years of IT security compliance or analysis experience. Must be able to obtain and maintain security clearance. Must be a U.S. Citizen or U.S. Permanent Resident. Must have IAT Level III certification or ability to obtain within six (6) months of hire.

Skills and Knowledge:

Knowledge of protecting information and systems within Classified and Controlled Unclassified Information (CUI) environments. Good communication skills and ability to work closely with internal teams and customers to ensure positive outcomes.

Preferred Qualifications:

Experience gathering information from cloud platforms and on premises systems. Experience with compliance tools, frameworks, and procedures. Experience in higher education or defense research environments. Experience with NIST SP 800-53, NIST SP 800-171, NISPOM, secure facility compliance, and CCMC security control requirements. Experience with eMASS.

Background Investigation Statement:

Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.

Equal Employment Opportunity

The University of Alabama is an Equal Employment/Equal Educational Opportunity Institution. All qualified applicants will receive consideration for employment or volunteer status without regard to any legally protected basis and will not be discriminated against because of their protected status. Applicants and employees of this institution are protected under Federal law from discrimination on several bases. More information is available in the EEOC’s Know Your Rights: Workplace discrimination is illegal poster. The University of Alabama affirms its longstanding commitment to institutional neutrality, free speech, and academic freedom.