Senior IT GRC Compliance Analyst

Southern Illinois University Carbondale; Carbondale (IL); On-site; USD 75,000 - 110,000; Full time

Job summary

Southern Illinois University Carbondale seeks a Compliance Analyst III to lead complex IT governance, risk, and compliance activities across systems and third‑party environments. The role interprets regulatory and contractual requirements and translates them into actionable risk and compliance work, collaborating with IT, procurement, legal, privacy, and other units.

The position requires independent judgment within defined frameworks and is responsible for audit readiness, risk management, and

Qualifications

• independently conduct complex IT, data protection, and regulatory compliance assessments
• coordinates internal and external audit engagements
• provides guidance to project teams and system owners on compliance requirements
• interprets regulatory, contractual, and institutional requirements and translates them into risk activities
• monitors changes in regulatory requirements and prepares risk summaries

Responsibilities

• Scopes, plans, and executes IT, data protection, and regulatory assessments
• Coordinates audit activities including evidence collection and remediation tracking
• Advises teams on compliance requirements throughout system lifecycles
• Aligns compliance with project governance and artifact requirements
• Tracks regulatory and policy changes and informs leadership
• Prepares compliance status reports and risk summaries
• Escalates high-risk or nonstandard issues for leadership review

Skills

IT governance

risk analysis

audit coordination

stakeholder communication

policy interpretation

Education

Bachelor's degree in Information Systems / Cybersecurity or related field

Tools

IT-GRC tools

Job description

Southern Illinois University Carbondale seeks a Compliance Analyst III to lead complex IT governance, risk, and compliance activities across systems and third‑party environments. The role interprets regulatory and contractual requirements and translates them into actionable risk and compliance work, collaborating with IT, procurement, legal, privacy, and other units.

The position requires independent judgment within defined frameworks and is responsible for audit readiness, risk management, and