> Markdown version of [/jobs/ext/1791796-security-risk-and-compliance-analyst-technology-solutions](https://www.wearedevelopers.com/jobs/ext/1791796-security-risk-and-compliance-analyst-technology-solutions). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Risk and Compliance Analyst - Technology Solutions - **Company:** University of Illinois - **Location:** Chicago, IL, United States - **Salary:** $70,000.0 - $85,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Firmware, Networking Basics, PCI Data Security Standards, Information Technology - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=39628ef70a1447d7 ## About the Role * Bachelor Degree within Computer Science or closely related field of study * Minimum 1 years of professional IT experience within IS Security which includes demonstrated experience in assessing, monitoring and maintaining, and evaluating information security policies and systems, including hardware, firmware and software. * Demonstrated knowledge of cybersecurity concepts, IT security policies, and emerging risks (including AI/ML), * Basic understanding of compliance and regulatory standards, including FERPA, HIPAA, and PCI DSS, and how they apply to protecting data. * Familiarity with networking basics (e.g., IP, ports), encryption methods (symmetric and asymmetric), authentication controls (MFA), and risk management frameworks such as the NIST Cybersecurity Framework. * Ability to support and contribute to security assessments, including documenting findings and translating technical risks into clear, business-friendly language. * Strong organizational skills, with the ability to manage multiple tasks and projects while maintaining attention to detail. ## Description The Security Risk and Compliance Analyst conducts third-party security risk and compliance reviews for technology and software procurements used by faculty, staff, and researchers. This includes evaluating administrative and technical controls, identifying risks, and providing guidance on compliance requirements and risk mitigation. The analyst will support the organization's efforts to meet security standards, regulations, and institutional policies. This role assists with frameworks such as NIST and COBIT to ensure the protection of confidential data types including FERPA, PII, PHI, and CUI. The analyst also contributes to compliance efforts and supports assessment activities using tools such as SOC 2 Type II and HECVAT., * Complete technology risk and security assessment requests from UIC faculty, staff, and researchers. * Facilitate communications with UIC faculty, staff, and researchers and product vendors in order to understand the use and function of technology so that a thorough risk assessment can be completed. * Research security and privacy policy and compliance-related issues and participate in team discussions to formulate new or enhance existing processes, policies, and standards. * Partner with internal and external units to ensure ongoing security and privacy training activities are completed. * Perform other related duties and participate in special projects as assigned. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Uncertainty Estimation of Neural Networks](https://www.wearedevelopers.com/videos/227-uncertainty-estimation-of-neural-networks) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Industries Outside of AI Are Hiring The Most AI Experts?](https://www.wearedevelopers.com/magazine/98-what-industries-outside-of-ai-are-hiring-the-most-ai-experts) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)