Senior Security Assurance & Compliance Analyst

University of Utah; Salt Lake City (UT); Presencial; USD 64.000 - 124.000; Tempo integral

Resumo da vaga

The University of Utah seeks a Security Assurance & Compliance Analyst, IV to own the compliance lifecycle for CHPC environments, coordinating governance, evidence, findings, and remediation for regulated research. You will interpret requirements including NIST SP 800-171, CMMC, HIPAA, and sponsor obligations, ensuring assessment-ready status.

Collaborate with technical teams and university partners to document controls, manage evidence, and drive continuous improvement across Linux/Windows

Qualificações

• Bachelor’s degree or equivalency with security/compliance focus.
• Ability to interpret regulatory requirements and document them clearly.
• Experience managing multiple findings and remediation activities.

Responsabilidades

• Maintain and reconcile SSPs, POA&Ms, control docs.
• Lead mock audits, security assessments, sponsor reviews.
• Evaluate evidence for sufficiency and traceability.
• Coordinate evidence requests with subject-matter experts.
• Track findings, owners, milestones, and deadlines.
• Draft security policies, standards, and governance docs.
• Research regulatory requirements affecting CHPC environments.
• Maintain GRC workflows in Hyperproof or similar.
• Perform quality reviews for alignment of docs and practices.
• Develop compliance reporting on readiness and remediation progress.
• Coordinate with university security, legal, and contracting teams.

Conhecimentos

Independent research

Stakeholder comms

Workflow management

Findings management

Evidence handling

Compliance documentation

Formação

Bachelor's degree or equivalency

Ferramentas

GRC platforms

Hyperproof

Descrição da vaga

The University of Utah seeks a Security Assurance & Compliance Analyst, IV to own the compliance lifecycle for CHPC environments, coordinating governance, evidence, findings, and remediation for regulated research. You will interpret requirements including NIST SP 800-171, CMMC, HIPAA, and sponsor obligations, ensuring assessment-ready status.

Collaborate with technical teams and university partners to document controls, manage evidence, and drive continuous improvement across Linux/Windows