West Virginia University (WVU) Information Technology Services (ITS) is seeking a Compliance Analyst to join our Information Security Services team. Reporting to the Assistant Director for Governance, Risk, and Compliance, you will leverage your knowledge of compliance requirements to design and implement effective, efficient information security controls across our enterprise environment. WVU generates a variety of data across its 3 campuses, some of which is subject to specific compliance requirements, including controlled unclassified data, covered financial data, student educational records, and protected health information. As a key member of the Information Security Services team, you will strive to ensure that protected University data is secured in compliance with the laws, regulations, and contractual obligations to which it is subject.
As a Compliance Analyst-Professional Technologist 3, your duties will include but will not be limited to the following:
Interpreting regulations and policies.
Researching and continuously stay abreast of the University's regulatory requirements.
Interpreting University policy in special circumstances, identify new policy requirements, and provide domain expertise as needed.
Leading University compliance initiatives.
Developing, evaluating, and implementing short-term and long-term goals and objectives for specific initiatives that ensure applications, servers, and the campus network are both compliant and align with the University's goals and objectives.
Keeping initiatives on track.
Coordinating with and providing guidance to technical teams to design and deploy secure systems.
Identifying action items considering effectiveness, efficiency, and the relative risks and rewards of these potential actions.
Recommending compliant security controls and design solutions for IT projects.
Establishing compliant policies and processes.
Creating and/or updating University policies, standards, and procedures to address regulatory requirements.
Developing and maintaining technical documentation including artifacts, flow charts, logs, and logic diagrams to address compliance initiatives and compliance auditing requirements.
Developing, managing, and maintaining a defined set of standard operating procedures supporting compliance initiatives.
Conducting compliance checks.
Performing annual assessments, evaluating findings, preparing and implementing remediation reports to remediate identified risks.
Validating compliance profile through in-house and third-party party audits.
Keeping senior leadership informed of non-compliance issues.
Providing compliance awareness.
Collaborating with other ITS teams to develop compliance awareness and education materials that provide training to a diverse audience (e.g., faculty, staff, researcher, students) using multiple channels (e.g., in-person, on-line, social media).
Communicating guidelines and regulatory requirements across the enterprise
Bachelor's degree. Focus in accounting, business, computer science, information security, risk management, or related discipline a plus. Master's degree a plus.
Any equivalent combination of education, certifications, and experience that provides the knowledge, skills, and ability to successfully perform the job can be substituted for experience.
Must have 4 years professional experience
Progressively responsible experience in information technology and/or higher education.
* Working experience with at least one of the following compliance regulations: NIST, HIPAA, FERPA, or GLBA.
At West Virginia University, we pride ourselves on a tireless endeavor for achievement. We are home to some of the most passionate, innovative minds in the country who push their limits for the sake of progress, constantly moving the world forward. Our students, faculty and staff make this institution one of the best out there, and we are proud to stand as one voice, one university, one WVU. Find out more about your opportunities as a Mountaineer at https://talentandculture.wvu.edu/
West Virginia University is an Equal Opportunity/Affirmative Action Employer and the recipient of an NSF ADVANCE award for gender equity. The University values diversity among its faculty, staff and students, and invites applications from all qualified individuals, including minorities, females, individuals with disabilities and veterans.
Job Posting: Feb 12, 2020
Posting Classification: Non-Classified
Exemption Status: Exempt
Benefits Eligible: Yes
Internal Number: 197982
About West Virginia University
West Virginia University, founded in 1867, has a long and rich history as a public, land-grant institution. WVU encourages scholarship and offers high-quality academic programs while serving the state of West Virginia and the nation. WVU statewide includes campuses in Beckley, Charleston, Keyser, Martinsburg and Morgantown – which has been ranked as a #1 Small City in America. WVU is an R1 Doctoral Research University (Highest Research Activity), one of only 115 nationwide. WVU offers 212 degrees throughout the 14 colleges and schools. Areas of specialty include STEM education, healthcare in Appalachia, shale gas utilization, radio astronomy and forensics. WVU researchers have helped confirm the existence of gravitational waves and uncovered diesel vehicle emissions discrepancies. Statewide, there are over 31,000 graduate and undergraduate students along with 190,000 alumni worldwide. WVU is reinventing West Virginia’s future by strengthening education, healthcare and broad-based prosperity.