Description
University of Colorado Denver l Anschutz Medical Campus
Office of Information Technology
Compliance Analyst
Position #729273 – Requisition #20420

* Applications are accepted electronically ONLY at www.cu.edu/cu-careers *

The Office of Information Technology has an opening for a full-time University Staff (unclassified) Compliance Analyst position.

The University of Colorado Denver | Anschutz Medical Campus is a public research university serving more than 18,000 students. We award nearly 4,000 degrees each year, including more graduate and professional degrees than any other Colorado institution. With our solid academic reputation, award-winning faculty and renowned researchers, we offer more than 140 highly rated degree programs through 13 schools and colleges. The university receives over $400 million in research awards each year. In addition to the wide array of health-related programs and facilities offered at CU Anschutz in Aurora, Colo. a significant number of undergraduate and graduate degree programs are taught at CU Denver, our comprehensive campus in the heart of downtown Denver—one of America’s most vibrant urban centers. CU Denver is located steps from the Denver Center for Performing Arts and the LoDo District affording our students, faculty and staff access to a broad array of academic, professional, community, recreational and cultural outlets. Read CU Anschutz Quick Facts here. 

The Office of Information Technology works to advance the University mission by providing innovative technology solutions and services to the CU Denver | Anschutz Medical Campuses, their constituents and partners. Click here to find out more about the Office of Information Technology 

Through our six core values, Service, Professionalism, Leadership, Innovation, Community, and Excellence (SPLICE), we make a difference. Click here to find out more about OIT’s Culture 

Under general direction, the Compliance Analyst identifies risks to information assets and data systems, ensuring compliance with industry standards, relevant regulations, and security best practices.  Following established processes, the Compliance Analyst evaluates the security and compliance posture of applications and cloud services that will be used to support University services and operations.  Assists university departments with the development of appropriate policies, procedures and documentation to maintain HIPAA and PCI compliance, as well as aiding the Denver and | Anschutz Medical Campus’ efforts to maintain compliance with all local, state and federal laws related to information security. 

The position works with IT support professionals and designated departmental data stewards and custodians to ensure compliance at the unit level, as well as working with a broad section of the university community to identify and clarify issues related to information security, risk management, and compliance.  The analyst assists with providing guidance to individuals and groups; helps with the creation and maintenance of risk management documentation; assesses compliance to frameworks from NIST, PCI DSS, and others.

Jobs in this career family develop, maintain, and support computer systems, software and networks.  Functions include enterprise operations, distributed computing, academic computing, research computing, computer hardware and software management, computer networking, telecommunications, systems development, database administration, server administration, website management, programming, desktop support, and help desk operations.

Professionals at the entry level are responsible for exercising discretion, analytical skill, personal accountability and responsibility in a wide range of areas including academic, administrative, managerial and student services functions. Work involves creating, integrating, applying and sharing knowledge directly related to a professional field. At the entry level, duties are limited in scope and are performed with guidance and direction from other professionals and are performed in a training and development capacity.

Examples of Work Performed

• Reviews customer and vendor application and cloud service questionnaires to determine impact and risk levels, as well as evaluating the overall security and compliance posture of the vendor, application or cloud service  
• Assists departments with the development and documentation of operating procedures, policies and templates to ensure compliance within their environments
• Serves as a resource person in assessing systems, processes, and policies against compliance requirements and security best practices
• Researches, recommends and documents action plans based on risk analyses
• Facilitates cross-functional teams to implement compliance initiatives and security controls

Supervision Received
The Compliance Analyst receives broad and general supervision that is in alignment with the Office of Information Technology’s strategic plan. The assigned work is multifaceted and technical. The successful candidate should be comfortable working in a matrix-management environment, as well as with traditional line and staff management.

Supervision Exercised
This position does not have supervisory responsibilities.

Salary and Benefits:
The salary range for this position has been established at $49,709 to $54,250

The salary of the finalist(s) selected for this role will be set based on a variety of factors, including but not limited to, internal equity, experience, education, specialty and training.

The above salary range (or hiring range) represents the University’s good faith and reasonable estimate of the range of possible compensation at the time of posting.

Your total compensation goes beyond the number on your paycheck. The University of Colorado provides generous leave, health plans and retirement contributions that add to your bottom line.
  
Benefits: https://www.cu.edu/employee-services/benefits
Total Compensation Calculator: http://www.cu.edu/node/153125

Diversity and Equity:
The University will provide reasonable accommodations to applicants with disabilities throughout the employment application process. To request an accommodation pursuant to the Americans with Disabilities Act, please contact the Human Resources ADA Coordinator at hr.adacoordinator@ucdenver.edu.

The University of Colorado Denver | Anschutz Medical Campus is committed to recruiting and supporting a diverse student body, faculty and administrative staff. The university strives to promote a culture of inclusiveness, respect, communication and understanding. We encourage applications from women, ethnic minorities, persons with disabilities and all veterans. The University of Colorado is committed to diversity and equality in education and employment.
 
The University of Colorado Denver | Anschutz Medical Campus is dedicated to ensuring a safe and secure environment for our faculty, staff, students and visitors. To assist in achieving that goal, we conduct background investigations for all prospective employees. 

Conditions of Employment:
This position may require some occasional weekend and evening assignments as well as availability during off-hours for participation in both scheduled and unscheduled activities.

This position is currently remote with the expectation to return to in-person work post COVID -19. Must be willing and able to travel between campuses (Denver Campus and Anschutz Medical Campus) when returned to in-person work.

PLEASE NOTE: Candidates will be responsible for travel expenses related to the interview process and any relocation expenses, if applicable.

Parking expenses for employees are not covered by the university. To review parking options please visit the link below and select your appropriate campus: Facilities Management Permit Parking 

Qualifications
Minimum Requirements

• Minimum of 1 year working in Compliance or Information Technology
• Graduation from an accredited college or university with a bachelor’s degree in in Computer Science, Management Information Systems, Risk Management, or related field.

Substitution:
Work experience in the Information Technology or Compliance fields may be substituted for this educational experience on a year for year basis – OR - an associate's degree in computer science or a closely related field plus two years' experience working in information technology.  

Condition of Employment:

• This position may require some occasional weekend and evening assignments as well as availability during off-hours for participation in both scheduled and unscheduled activities.

Preferred Qualifications

• HIPAA compliance experience
• PCI compliance experience 
• FISMA compliance experience 
• CISSP, GIAC or other security certifications
• Experience working in higher education
• Knowledge of information security standards and frameworks (NIST, ISO, etc.)

Knowledge, Skills, and Abilities

• Strong customer service and communication skills
• Excellent organization and time management skills
• Solid project management skills
• Ability to assess technical security controls for compliance

Job Category: Information Technology
Primary Location: Aurora
Schedule: Full-time
Posting Date: Mar 5, 2021
Unposting Date: Mar 12, 2021, 11:59:00 PM