Senior Security Assurance & Compliance Analyst

University of Utah; Salt Lake City (UT); On-site; USD 64,000 - 124,000; Full time

Job summary

The University of Utah CHPC Security Assurance & Compliance Analyst, IV leads the operational assurance and compliance lifecycle for CHPC environments, handling documentation, assessment readiness, and remediation tracking for regulated research. Works with technical teams and university partners to interpret requirements, ensure evidence sufficiency, and keep environments assessment-ready across frameworks like NIST SP 800-171, CMMC, HIPAA, and contractual obligations.

Location: Campus.

Qualifications

• Requires formal education plus substantial directly related work experience.
• Security and compliance documentation experience essential.
• Familiarity with NIST, HIPAA, and regulatory frameworks preferred.

Responsibilities

• Maintain and reconcile security documentation and control materials.
• Lead preparation for security assessments, audits, and sponsor reviews.
• Evaluate evidence and ensure traceability to requirements.
• Coordinate evidence requests with technical SMEs and manage remediation tracking.
• Draft and maintain policies, standards, and governance documentation.
• Research regulatory requirements affecting CHPC environments.
• Maintain GRC workflows and remediation tracking across platforms.

Education

Bachelor's degree or equivalent + 8 years

Master's degree or equivalent + 6 years

CISA

CGRC

CRISC

CISSP

Tools

Hyperproof

Job description

The University of Utah CHPC Security Assurance & Compliance Analyst, IV leads the operational assurance and compliance lifecycle for CHPC environments, handling documentation, assessment readiness, and remediation tracking for regulated research. Works with technical teams and university partners to interpret requirements, ensure evidence sufficiency, and keep environments assessment-ready across frameworks like NIST SP 800-171, CMMC, HIPAA, and contractual obligations.

Location: Campus.