IT Compliance Analyst

Agency: Northern Virginia Community College (NOVA). Division: VP of College Computing. Position Number: 28000957. FLSA: Exempt. Pay Band: 05. Hiring range: $95,000 – $105,000. Full‑time position. Work schedule: Monday‑Friday, 8 hours per day. Telework: not available.

General Description

The IT Compliance Analyst is responsible for protecting the organization’s digital assets by implementing, monitoring, and maintaining robust cybersecurity controls, systems, and compliance processes. This role ensures that the institution’s information technology systems, processes, and data practices comply with applicable federal and state regulations, industry standards, and institutional policies.

Duties and Responsibilities

• Regulatory Compliance & Policy Management: Perform regular reviews, updates, and version control of cybersecurity policies, procedures, standards, guidelines, and supporting documentation.
• Vendor & Third‑Party Risk Management (TPRM): Review, update, and maintain TPRM policies and processes.
• Cybersecurity Assessments & Internal Controls Preparedness: Track gaps in internal controls, ensure timely follow‑up by responsible parties, and prepare readiness reports for senior IT leadership.
• Security Awareness & Compliance Training: Develop and deliver IT compliance and data privacy training programs (e.g., FERPA, cybersecurity awareness); track completion rates institution‑wide.
• Risk Management & Data Privacy: Conduct periodic IT risk assessments and Privacy Impact Assessments.
• Special Assignments: Perform other duties as assigned and assist the agency or state government in the event of an emergency declaration by the Governor.

Required Qualifications

• Knowledge and ability to produce clear, concise technical reports and collaborate cross‑functionally.
• Understanding of IT cybersecurity and privacy principles, including FERPA, HIPAA, PCI DSS, GLBA, and CIS Controls.
• Analytical skills and attention to detail in reviewing cybersecurity policies, conducting maturity and risk assessments, and managing compliance evidence.
• Ability to work with technical teams, vendors, and third‑party providers to validate controls and collect compliance evidence (e.g., HECVAT questionnaires, SOC 2 reports) for the TPRM program.
• Experience administering security awareness and compliance training programs, including phishing simulations and institution‑wide campaigns, and tracking completion.
• Minimum work experience in cybersecurity operations, IT security analysis, risk management, or compliance enforcement.
• Experience implementing and aligning controls with major security frameworks (e.g., NIST CSF, CIS Controls, PCI DSS, FERPA, HIPAA).
• Hands‑on experience with security, compliance, or administrative tools such as KnowBe4, MS Attack Simulator, CIS CSAT, TeamDynamix.

Additional Considerations

• Experience working within a higher‑education institution or public‑sector environment.
• One or more professional certifications (e.g., CompTIA Security+, CompTIA Project+, ITIL 4 Foundation).
• Familiarity with GRC platforms or learning management systems (e.g., Canvas).

Benefits

NOVA offers eligible employees a comprehensive benefits package that includes health and dental insurance, generous paid leave, deferred compensation plans, paid parental leave, state employee discounts, and a secure retirement program. The college also provides tools and development opportunities to support its mission.

Pay

Hiring range: $95,000 – $105,000 annually.