Security Risk and Compliance Analyst - Technology Solutions

The Security Risk and Compliance Analyst conducts third-party security risk and compliance reviews for technology and software procurements used by faculty, staff, and researchers. This includes evaluating administrative and technical controls, identifying risks, and providing guidance on compliance requirements and risk mitigation. The analyst will support the organization’s efforts to meet security standards, regulations, and institutional policies. This role assists with frameworks such as NIST and COBIT to ensure the protection of confidential data types including FERPA, PII, PHI, and CUI. The analyst also contributes to compliance efforts and supports assessment activities using tools such as SOC 2 Type II and HECVAT., * Complete technology risk and security assessment requests from UIC faculty, staff, and researchers.

• Facilitate communications with UIC faculty, staff, and researchers and product vendors in order to understand the use and function of technology so that a thorough risk assessment can be completed.
• Research security and privacy policy and compliance-related issues and participate in team discussions to formulate new or enhance existing processes, policies, and standards.
• Partner with internal and external units to ensure ongoing security and privacy training activities are completed.
• Perform other related duties and participate in special projects as assigned.

• Bachelor Degree within Computer Science or closely related field of study

• Minimum 1 years of professional IT experience within IS Security which includes demonstrated experience in assessing, monitoring and maintaining, and evaluating information security policies and systems, including hardware, firmware and software.

• Demonstrated knowledge of cybersecurity concepts, IT security policies, and emerging risks (including AI/ML), * Basic understanding of compliance and regulatory standards, including FERPA, HIPAA, and PCI DSS, and how they apply to protecting data.
• Familiarity with networking basics (e.g., IP, ports), encryption methods (symmetric and asymmetric), authentication controls (MFA), and risk management frameworks such as the NIST Cybersecurity Framework.
• Ability to support and contribute to security assessments, including documenting findings and translating technical risks into clear, business-friendly language.
• Strong organizational skills, with the ability to manage multiple tasks and projects while maintaining attention to detail.

Pulled from the full job description

• Health insurance
• Retirement plan
• Paid time off
• Vision insurance
• Dental insurance
• Life insurance, and among all national universities. UIC has nearly 260,000 alumni, and is one of the largest employers in the city of Chicago.

This position is intended to be eligible for benefits. This includes Health, Dental, Vision, Life Insurance, a Retirement Plan, Paid time Off, and Tuition waivers for employees and dependents.

UIC is among the nation’s preeminent urban public research universities, a Carnegie RU/VH research institution, and the largest university in Chicago. UIC serves over 34,000 students, comprising one of the most diverse student bodies in the nation and is designated as a Minority Serving Institution (MSI), an Asian American and Native American Pacific Islander Serving Institution (AANAPSI) and a Hispanic Serving Institution (HSI). Through its 16 colleges, UIC produces nationally and internationally recognized multidisciplinary academic programs in concert with civic, corporate and community partners worldwide, including a full complement of health sciences colleges. By emphasizing cutting-edge and transformational research along with a commitment to the success of all students, UIC embodies the dynamic, vibrant and engaged urban university. Recent “Best Colleges” rankings published by U.S. News & World Report, found UIC climbed up in its rankings among top public schools in the nation