Security Assurance & Compliance Analyst, IV

Utah; Salt Lake City (UT); On-site; USD 64,000 - 124,000; Full time

Job summary

The University of Utah is seeking a Security Assurance & Compliance Analyst, IV to join the CHPC Security & Compliance team.

This advanced individual contributor will own the operational assurance and compliance lifecycle for CHPC environments supporting regulated and sensitive research, handling documentation, assessment readiness, control and evidence management, findings and remediation tracking, and governance activities.

Responsibilities

• Maintain and reconcile System Security Plans, POA&Ms, and related artifacts.
• Coordinate with university partners to ensure compliance requirements are properly interpreted and documented.

Job description

Details

Open Date 11/02/2026

Requisition Number PRN46655B

Job Title Information Systems Auditors

Working Title Security Assurance & Compliance Analyst, IV

Career Progression Track P00

Track Level P4 - Advanced

FLSA Code Computer Employee

Patient Sensitive Job Code? No

Standard Hours per Week 40

Full Time or Part Time? Full Time

Shift Day

Work Schedule Summary

Monday - Friday 8am-5pm

VP Area Academic Affairs

Department 00640 - CHPC Ctr for High Perform Computing

Location Campus

City Salt Lake City, UT

Type of Recruitment External Posting

Pay Rate Range $64,122 - $124,278

Close Date 01/29/2027

Priority Review Date (Note - Posting may close at any time) 11/28/2026

Job Summary

The Security Assurance & Compliance Analyst, IV serves as an advanced individual contributor within the CHPC Security & Compliance team. This individual owns and will be the primary builder of the operational assurance and compliance lifecycle for CHPC environments supporting regulated and sensitive research. The position is responsible for compliance documentation, assessment readiness, control and evidence management, findings and remediation tracking, GRC workflows, governance documentation, and continuous improvement.

The Analyst works with technical teams and University partners to ensure applicable requirements are accurately interpreted and documented, controls are supported by sufficient and traceable evidence, findings are managed to closure, and environments remain assessment-ready. Applicable requirements may include NIST SP 800-171, CMMC , HIPAA , University information security requirements, federal contractual obligations, and other sponsor or regulatory requirements in relation to Linux and/or Windows.

Learn more about the great benefits of working for University of Utah: benefits.utah.edu

Responsibilities

• Maintain and reconcile System Security Plans, POA & Ms,