Information Security Compliance and Operations Analyst

Essential Duties and Responsibilities:

The Information Security Compliance and Operations Analyst directs faculty and staff in making security decisions for themselves and the organization that align with enterprise security performance objectives and expectations, and which directly support the University's academic and research missions. The Information Security Compliance and Operations Analyst assists with monitoring compliance with policies, guidelines, standards, and procedures that are in place to assure the protection of University information and information assets. This is done through campus education, compliance monitoring and reporting, awareness campaigns, and assistance with incident response. In addition to assisting with the compliance needs of the University, there will also be a hands-on aspect to this position, and you may be asked to assist other areas within the Security team.

The Information Security Compliance and Operations Analyst must be able to direct and assist with IS Compliance at UNC Charlottecampus-wide; serve as the University's OneIT liaison for PCI-DSS Compliance, working with the Bursar's Office and OneITEnterprise Infrastructure to ensure a secure PCI environment; conduct audits for compliance routinely and asappropriate; work closely with OneIT leadership and Legal Affairs for campus-wide policy proposals, management andcompliance decisions; provide substantive professional advice on PCI-DSS and IS compliance issues and useindependent judgment and discretion to make decisions that impact business needs and client productivity campus-wide; communicate articulately/effectively with a variety of staff at all levels of the University community; must be able to applycritical thinking and sound judgment to independently recognize and resolve IS compliance issues at UNC Charlotte;ability to be self-initiating in approaching work duties to independently review, evaluate and recognize matters ofsignificance and implement actions accordingly to mitigate; must be familiar with a wide range of IT services provided atUNC Charlotte and able to anticipate potential IS compliance issues associated with each.

• Educate the university community on information security and privacy responsibilities.
• Lead university-wide IT security risk assessments.
• Serve as the university's OneIT liaison with respect to PCI-DSS policies and regulations.
• Coordinate and manage the development of standards and guidelines to support information security compliance.
• Work with the CISO on high-severity security incidents and those involving compliance issues.
• Create and maintain the university's information security training and awareness campaigns.
• Assist with security operations tasks and functions.

Minimum Experience / Education:

Bachelor's degree plus four years of relevant work experience; or the equivalent combination of education and work experience.

Preferred Education Skills and Experience:

• Hands-on information security-related experience
• Experience working within a Higher Education environment
• Experience working within an enterprise security compliance program
• Knowledge of PCI-DSS, FERPA, HIPAA, ISO27002, CMMC, and NIST standards