Security Risk and Compliance Analyst - Technology Solutions

About the role

The Security Risk and Compliance Analyst at the University of Illinois Chicago (UIC) is responsible for conducting third-party security risk and compliance reviews for technology and software procurements used by faculty, staff, and researchers. This role involves evaluating administrative and technical controls, identifying risks, and providing guidance on compliance requirements and risk mitigation.

Responsibilities

• Complete technology risk and security assessment requests from UIC faculty, staff, and researchers.
• Facilitate communications with UIC faculty, staff, and researchers and product vendors in order to understand the use and function of technology so that a thorough risk assessment can be completed.
• Research security and privacy policy and compliance-related issues and participate in team discussions to formulate new or enhance existing processes, policies, and standards.
• Partner with internal and external units to ensure ongoing security and privacy training activities are completed.
• Perform other related duties and participate in special projects as assigned.

Requirements

• Bachelor Degree within Computer Science or closely related field of study
• Minimum 1 years of professional IT experience within IS Security which includes demonstrated experience in assessing, monitoring and maintaining, and evaluating information security policies and systems, including hardware, firmware and software.
• Demonstrated knowledge of cybersecurity concepts, IT security policies, and emerging risks (including AI/ML)

Preferred Qualifications

• Basic understanding of compliance and regulatory standards, including FERPA, HIPAA, and PCI DSS, and how they apply to protecting data.
• Familiarity with networking basics (e.g., IP, ports), encryption methods (symmetric and asymmetric), authentication controls (MFA), and risk management frameworks such as the NIST Cybersecurity Framework.
• Ability to support and contribute to security assessments, including documenting findings and translating technical risks into clear, business-friendly language.
• Strong organizational skills, with the ability to manage multiple tasks and projects while maintaining attention to detail.

Benefits

This position is eligible for benefits, including Health, Dental, Vision, Life Insurance, a Retirement Plan, Paid time Off, and Tuition waivers for employees and dependents. The Security Risk and Compliance Analyst will also support the organization's efforts to meet security standards, regulations, and institutional policies, and contribute to compliance efforts and support assessment activities using tools such as SOC 2 Type II and HECVAT.