Apply on Employer Site

Inside Higher Ed · 4 days ago

INFOSEC COMPLIANCE ANALYST III, IS&T Information Security

Boston, MA

Full-time

Hybrid

Mid Level

$120K/yr - $169K/yr

Inside Higher Ed is seeking an Information Security Compliance Analyst III to join their innovative and inclusive community. The role involves ensuring that technology solutions deployed by the university comply with applicable legal, regulatory, and contractual obligations, while also building relationships with various stakeholders and leading compliance-related projects.

Digital MediaEducationHigher EducationJournalismRecruiting

Responsibilities

Build relationships and communicate compliance requirements with academic, research, and clinical stakeholders, including Principal Investigators and external sponsors

Be the Subject Matter Expert on compliance topics, participating in committees and project teams to inform decisions and best practices

Independently partner with technology staff to validate physical, technical, and administrative controls and ensure alignment with compliance requirements

Lead or coordinate risk and gap assessments to identify needs and areas of concern and guide the development of solutions

Help design and implement compliant solutions for IS&T-run services

Oversee compliance-related projects, managing resources and deliverables

Monitor and investigate current and emerging compliance topics to inform strategic direction

Qualification

NIST 800-53NIST 800-171CMMCRisk assessmentCompliance guidanceCISSPCISMCCPCollaborationConflict mediation

Required

Knowledge of controls required by NIST 800-53, NIST 800-171, and CMMC

Proficiency in completing NIST 800-53 and/or NIST 800-171 System Security Plans

The ability to translate regulatory and technical compliance requirements into clear guidance for IT staff, management, and researchers

A history of collaborating with technical teams, departments, and external partners to achieve compliance goals

Skill in evaluating risks, identifying gaps, and recommending improvements

A proven track record of mediating conflicts and coordinating deliverables to achieve compliance while meeting timelines

Alternative qualifications that may substitute for formal education, such as military service, certifications, or substantial hands-on work in compliance and risk management

Preferred

Relevant professional certifications (e.g., CISSP, CCP, CISM, or equivalent), completion of bootcamps, or hands-on experience in compliance and security controls