IT Policy & Compliance Analyst - Hybrid, Vendor Risk

Commonwealth of VA Careers; Harrisonburg (VA); Hybrid; USD 65,000 - 70,000; Full time

Benefits offered by this job

Paid leave

Health coverage

Retirement benefits

Tuition waiver

Job summary

James Madison University is seeking an Information Technology Policy and Compliance Analyst to support its Third-Party Vendor Management Program, ensuring regulatory compliance across IT policies and standards.

The role offers a hybrid work schedule, with a starting salary range of $65,000–$70,000, and is classified as full-time, exempt. The candidate will work within IT Policy and Compliance, contributing to risk management and training initiatives.

Qualifications

• Knowledge or experience in computer science, information technology, technical writing, business administration, or related field.
• Experience with IT vendor risk assessment or vendor compliance.
• Security awareness and ability to interpret IT best practices.
• Excellent writing skills to create clear requirements and documentation.
• Strong written and verbal communication for technical to non-technical audiences.
• Highly organized with excellent time management and prioritization.
• Ability to work independently and in teams, detail-oriented.
• Proficiency with Microsoft Excel, Word, SharePoint and Teams.

Responsibilities

• Prepare security operations reviews for on-premises and cloud IT systems to align with policies and compliance.
• Conduct annual reviews of existing systems for continued information security compliance.
• Analyze SOC 2 or other security audits of vendors' policies and controls.
• Support IT’s Third-Party Vendor Management Program as part of the Technology Review Board.
• Educate partners on JMU’s IT risk management requirements.
• Assist with administration of security awareness and compliance training.
• Maintain organized compliance records per regulations, standards, and best practices.
• Handle university and vendor data with honesty, integrity, and confidentiality.

Skills

IT risk assessment

Vendor compliance

Security awareness

Technical writing

Communication

Organization

Independent work

Attention to detail

MS Office

Education

Related field degree

Tools

Excel

Word

SharePoint

Teams

Job description

James Madison University is seeking an Information Technology Policy and Compliance Analyst to support its Third-Party Vendor Management Program, ensuring regulatory compliance across IT policies and standards.

The role offers a hybrid work schedule, with a starting salary range of $65,000–$70,000, and is classified as full-time, exempt. The candidate will work within IT Policy and Compliance, contributing to risk management and training initiatives.