IT Policy and Compliance Analyst

Commonwealth of VA Careers; Harrisonburg (VA); Hybrid; USD 65,000 - 70,000; Full time

Benefits offered by this job

Paid leave

Health coverage

Retirement benefits

Tuition waiver

Job summary

James Madison University is seeking an Information Technology Policy and Compliance Analyst to support its Third-Party Vendor Management Program, ensuring regulatory compliance across IT policies and standards.

The role offers a hybrid work schedule, with a starting salary range of $65,000–$70,000, and is classified as full-time, exempt. The candidate will work within IT Policy and Compliance, contributing to risk management and training initiatives.

Qualifications

• Knowledge or experience in computer science, information technology, technical writing, business administration, or related field.
• Experience with IT vendor risk assessment or vendor compliance.
• Security awareness and ability to interpret IT best practices.
• Excellent writing skills to create clear requirements and documentation.
• Strong written and verbal communication for technical to non-technical audiences.
• Highly organized with excellent time management and prioritization.
• Ability to work independently and in teams, detail-oriented.
• Proficiency with Microsoft Excel, Word, SharePoint and Teams.

Responsibilities

• Prepare security operations reviews for on-premises and cloud IT systems to align with policies and compliance.
• Conduct annual reviews of existing systems for continued information security compliance.
• Analyze SOC 2 or other security audits of vendors' policies and controls.
• Support IT’s Third-Party Vendor Management Program as part of the Technology Review Board.
• Educate partners on JMU’s IT risk management requirements.
• Assist with administration of security awareness and compliance training.
• Maintain organized compliance records per regulations, standards, and best practices.
• Handle university and vendor data with honesty, integrity, and confidentiality.

Skills

IT risk assessment

Vendor compliance

Security awareness

Technical writing

Communication

Organization

Independent work

Attention to detail

MS Office

Education

Related field degree

Tools

Excel

Word

SharePoint

Teams

Job description

Working Title: IT Policy and Compliance Analyst

State Role Title:Information Technology Specialist II

Position Type:Full-time Staff (Classified)

Position Status: Full-Time

FLSA Status: Exempt: Not Eligible for Overtime

College/Division: Information Technology

Department: 100784 – IT Policy and Compliance

Pay Band:5

Pay Rate:Pay Range

Specify Range or Amount: $65,000 - $70,000

Is this a JMU only position?No

Is this a grant-funded position?No

Is this a Conflict of Interest designated position?No

Beginning Review Date:9/17/2026

About JMU:

At James Madison University (JMU), we’re more than just a publicly funded institution — we’re a vibrant, welcoming community located on a stunning campus where innovation, collaboration, and personal growth thrive. Our mission is to prepare students for a bright future, and we believe that starts with supporting the people who make it all possible: our employees.

Why Work at JMU?

We offer a comprehensive benefits package designed to support your professional journey and personal wellbeing:

• Generous Leave: Enjoy paid vacation, sick leave, parental leave, community service leave, and 19 paid holidays annually.
• Comprehensive Health Coverage: Access high-quality health insurance options that fit your needs.
• Retirement Options: Plan for your future with retirement benefits through the Virginia Retirement System.
• Employee Well-Being: Our Balanced Dukes program promotes wellness and work-life integration through resources, events, and support.
• Tuition Waiver Program: Advance your education with our tuition waiver program for undergraduate and graduate courses taken at JMU.

At JMU, we believe in Being the Change - and that starts with creating an environment where you can grow, contribute meaningfully, and feel supported every step of the way.

Discover what makes JMU a great place to work: bit.ly/JMUEmployment

General Information:

James Madison University is accepting applications for an Information Technology Policy and Compliance Analyst to provide support for Information Technology's Third-Party Vendor Management Program. The successful candidate will assist IT in ensuring compliance with applicable information technology regulations, policies, and standards.

This position is eligible for a hybrid work schedule.

Duties and Responsibilities:

• Prepare information security operations reviews of on-premises and cloud-based IT systems and services to ensure alignment with university policies and compliance regulations.
• Perform annual reviews of existing systems to ensure continued information security compliance.
• Analyze SOC 2 or other independent security audit reports that attest to a vendor’s security policies, procedures, and controls.
• Provide assistance with IT’s Third-Party Vendor Management Program by serving as a member of the Technology Review Board.
• Educate and provide guidance to key partners related to JMU’s information technology risk management requirements.
• Assist with the administration of IT’s security awareness and compliance training program.
• Ensure information technology compliance records are organized and complete in accordance with applicable regulations, policies, standards, and best practices.
• Demonstrate honesty, integrity, and confidentiality in the handling of university and vendor data.

Qualifications:

Required Qualifications:

• Demonstrated knowledge or experience in computer science, information technology, technical writing, business administration, or related field.
• Experience with information technology vendor risk assessment or vendor compliance.
• Strong security awareness and experience interpreting technical information, especially related to information technology best practices.
• Excellent writing skills, with the ability to create clear requirements, specifications, and documentation.
• Ability to effectively communicate, verbally and in writing, complex, technical information to both technical and non-technical audiences.
• Exceptional organization, time management, and prioritization skills.
• Ability to work independently with limited supervision as well as in teams.
• Detail-oriented and able to work with a high degree of accuracy.
• Proficient with Microsoft Excel, Word, SharePoint, and Teams.

Additional Considerations:

• Familiarity with requirements related to information technology regulations and standards including GLBA, PCI, ISO 27001 and 27002, HIPAA, HITECH, GDPR, Title II, AI governance, etc.
• Experience analyzing SOC 2 or other independent security audit reports that attest to a vendor’s security policies, procedures, and controls.
• Experience with information technology policies and procedures.
• Experience with language and terms used in contracts, licenses, and other legal documents related to information technology.
• Experience with supporting security awareness and other compliance training programs.

Additional Posting Information:

Conditions of Employment:

Employment is contingent upon the successful completion of a criminal background check.

E-Verify Notice: After accepting employment, new hires are required to complete an I-9 form and present documentation of their identity and eligibility to work in the United States. James Madison University uses the E-Verify system to confirm identity and work authorization.

EEO Statement:

James Madison University is committed to creating and supporting a diverse and inclusive work and educational community that is free of all forms of discrimination. This institution does not tolerate discrimination or harassment on the basis of age, color, disability, gender identity or expression, genetic information, national origin, parental status, political affiliation, race, religion, sex, sexual orientation or veteran status.

We promote access, inclusion and diversity for all students, faculty, staff, constituents and programs, believing that these qualities are foundational components of an outstanding education in keeping with our mission. The university is interested in candidates whose experience and qualifications support an ongoing commitment to this core quality.

Anyone having questions concerning discrimination should contact the Office for Equal Opportunity: [phone].

Reasonable Accommodation:

If you are an individual with a disability and need assistance searching or applying for jobs please contact us at [phone] or [e-mail]. You may also visit the JMU Human Resource Office, located at 752 Ott Street, Harrisonburg, VA 22807 and we will be happy to assist you.