"Security Compliance Analyst"

Security Compliance Analyst

Job Summary

The University of Utah's Center for High Performance Computing (CHPC) seeks a Compliance Analyst to support cybersecurity and regulatory compliance for research projects involving regulated data. This role coordinates with institutional offices (ISO, IRB, Privacy Office, GRC) and research teams to ensure secure and compliant operations across CHPC systems. This role is part of a small, embedded security & compliance team with ample opportunities for cross training and skill growth.

Responsibilities

• Serve as primary contact for CHPC regulated research compliance coordination.
• Coordinate background checks and regulatory prerequisites for research personnel.
• Research and interpret security requirements in collaboration with campus compliance offices.
• Maintain and update policies, procedures, and acceptable use documentation.
• Liaise with university departments to resolve outdated or unclear compliance practices.
• Manage project documentation, including Needs Assessments and regulated research records.
• Lead and document compliance meetings; assign and track action items.
• Coordinate and track required user training for secure computing environments.
• Monitor and respond to project-related tickets and communications.
• Oversee IRB closeout processes
• Coordinate with other offices to ensure required documentation is in place (e.g., BAAs, NDAs, ISAFs).
• Support security & compliance audit preparation.

Minimum Qualifications

• Requires a bachelor's degree in a related area or equivalency (one year of education can be substituted for one year of related work experience) and 2-4 years of experience in the field or in a related area.
• Familiarity with federal regulations such as NIST SP 800-171, CMMC, HIPAA, etc.
• Strong organizational, communication, and documentation skills.

Department may hire employee at one of the following job levels:

Equivalency Statement: 1 year of higher education can be substituted for 1 year of directly related work experience (Example: bachelor's degree = 4 years directly related work experience).

Security Compliance Analyst, II: Requires a bachelor's (or equivalency) + 4 years or a master's (or equivalency) + 2 years of directly related work experience. Assumes work equivalency (1 year of higher education can be substituted for 1 year of directly related work experience).

Security Compliance Analyst, III: Requires a bachelor's (or equivalency) + 6 years or a master's (or equivalency) + 4 years of directly related work experience. Assumes work equivalency (1 year of higher education can be substituted for 1 year of directly related work experience).

Security Compliance Analyst, IV: Requires a bachelor's (or equivalency) + 8 years or a master's (or equivalency) + 6 years of directly related work experience. Assumes work equivalency (1 year of higher education can be substituted for 1 year of directly related work experience).

Preferences

• Experience with cybersecurity governance, risk, & compliance (GRC).
• Experience with IT ticketing systems, such as Service Now.
• Familiarity with IRB processes.
• Certifications such as Certified in Cybersecurity (CC), Security+, CRISC
• Experience in higher education or regulated research environments.
• Experience with compliance automation and compliance as code.

Special Instructions

Requisition Number: PRN43418B
Full Time or Part Time? Full Time
Work Schedule Summary:
Department: 00640 - CHPC Ctr for High Perform Computing
Location: Campus
Pay Rate Range: $43,796 - $147,104
Close Date: 1/28/2026
Open Until Filled:

To apply, visit https://utah.peopleadmin.com/postings/191529