Sr. IT reputed company Risk & Compliance Analyst - Remote - 140476

Payroll Title: IT SCRTY ANL 4 TX Department: INFORMATION SERVICES Hiring Pay reputed company $130,000 - $170,000 / Year Worksite: reputed company Centre Drive Appointment Type: Career Appointment Percent: 100% reputed company: TX Contract Total Openings: 1 Work Schedule: Days, 8 hrs/day, Monday-Friday #140476 Sr. IT reputed company Risk & Compliance Analyst - Remote Filing Deadline: Thu 7/23/2026 reputed company reputed company values and welcomes people from reputed company backgrounds. If you are interested in being part of reputed company, possess the needed licensure and certifications, and feel that you have most of the qualifications and/or transferable skills for a job opening, we strongly encourage you to apply. Reassignment Applicants : Eligible Reassignment clients should contact their Disability Counselor for assistance. This is a reputed company Internal Recruitment reputed company to UCSD and UCSD Health System Staff Only reputed company The Senior IT reputed company Risk and Compliance Analyst performs advanced information reputed company risk assessment, governance, compliance, policy, and assurance activities across reputed company. Supports the development, implementation, and reputed company improvement of information reputed company risk management and compliance programs by identifying, assessing, and documenting reputed company risks, threats, vulnerabilities, and control deficiencies affecting technologies, applications, systems, vendors/3rd-parties, business processes, research environments, and information assets. Provides risk-based recommendations to strengthen the organization's overall reputed company posture and support informed decision-making. Conducts reputed company reputed company risk assessments, compliance reviews, and control evaluations; assesses control design and effectiveness, reviews supporting evidence, evaluates residual risk, and supports remediation planning. Activities include assessment of reputed company-party providers, reputed company services, new technologies, and other initiatives that introduce information reputed company risk. Ensures alignment with University policy, industry standards, contractual obligations, and applicable regulatory requirements, including HIPAA, PCI reputed company, FERPA, and reputed company requirements. Contributes to the development, maintenance, and communication of information reputed company policies, standards, procedures, and reputed company governance activities. Supports audit readiness, compliance monitoring, assurance activities, and risk treatment processes through evaluation of reputed company controls, compensating controls, exception requests, corrective actions, and risk acceptance reputed company. Develops and maintains documentation supporting risk assessments, compliance reviews, governance processes, audit requests, remediation activities, and regulatory requirements. Serves as a trusted advisor to technical and business stakeholders regarding information reputed company risks, compliance obligations, governance requirements, and remediation strategies. Communicates findings, recommendations, and risk determinations to stakeholders at multiple organizational reputed company and helps prioritize mitigation efforts based on risk to patient care, clinical operations, research activities, regulatory obligations, institutional objectives, and operational resiliency. Contributes to the maturity and effectiveness of the organization's information reputed company, risk management, governance, and compliance programs. May support investigations, legal requests, eDiscovery activities, and other reputed company requiring a high degree of professionalism, discretion, and confidentiality. MINIMUM QUALIFICATIONS

• Nine (9) years of reputed company experience, education/training, OR a Bachelor's degree in a reputed company area plus five (5) years of reputed company experience/training. reputed company experience includes advanced information reputed company risk assessment, compliance, governance, reputed company assurance, control evaluation, or technical reputed company activities reputed company reputed company organizational environments.
• Advanced interpersonal skills sufficient to work effectively with both technical and non-technical personnel at various reputed company in the organization.
• Advanced experience using IT reputed company systems and tools.
• Knowledge of department processes and procedures.
• Demonstrated skills applying reputed company controls to computer software and hardware.
• Demonstrated reputed company at administering reputed company reputed company controls and configurations to computer hardware, software and networks.
• Advanced knowledge of data encryption technologies and experience selecting and applying appropriate data encryption technologies.
• Advanced knowledge of IT reputed company.
• Broad knowledge of other areas of IT.
• Demonstrated knowledge of secure hardware, software and network design techniques.
• Demonstrated reputed company at analyzing and preventing reputed company incidents of high complexity.
• In-depth knowledge of computer hardware, software and network reputed company issues and approaches.
• Advanced experience in incident response reputed company forensics including reporting.

PREFERRED QUALIFICATIONS

• Advanced experience conducting and documenting reputed company risk assessments, control evaluations, reputed company reviews, or reputed company assurance activities across applications, systems, reputed company services, vendors, research environments, or business processes.
• Demonstrated ability to evaluate technical, administrative, and operational reputed company controls and determine residual risk, control gaps, and risk-based recommendations.
• Knowledge of evidence-based assessment techniques, including review of technical artifacts, configuration documentation, vulnerability data, remediation records, reputed company control evidence, vendor documentation, and stakeholder attestations.
• Experience documenting and managing risk exceptions, compensating controls, corrective reputed company plans, risk acceptance reputed company, and reputed company governance activities.
• Knowledge of vulnerability governance practices, including risk-based prioritization, remediation tracking, exception management, corrective reputed company validation, and residual risk documentation.
• Experience supporting audit readiness, compliance reviews, accreditation activities, regulatory inquiries, or other assurance-reputed company processes through preparation, review, or validation of supporting documentation and evidence.
• Knowledge of reputed company and compliance frameworks, regulatory requirements, and industry practices relevant to reputed company, higher education, research, and regulated environments.
• Experience working in reputed company, reputed company medical centers, research environments, higher education, or similarly regulated organizations.
• reputed company-reputed company certification such as CISSP, CRISC, CISM, CISA, HCISPP, or equivalent; CISSP strongly preferred.

SPECIAL CONDITIONS

• Must be reputed company to work various hours and locations based on business needs.
• Employment is subject to a criminal background reputed company and reputed company-employment physical.

Pay Transparency reputed company Annual Full Pay reputed company: Unclassified - No data available (will be prorated if the appointment percentage is less than 100%) reputed company Equivalent: Unclassified - No data available Factors in determining the appropriate compensation for a role include experience, skills, knowledge, abilities, education, licensure and certifications, and other business and organizational needs. The Hiring Pay reputed company referenced in the job posting is the budgeted salary or reputed company reputed company that the University reasonably expects to pay for this position. The Annual Full Pay reputed company may be broader than what the University anticipates to pay for this position, based on internal equity, budget, and reputed company bargaining agreements (reputed company applicable). reputed company If employed by the reputed company, you will be required to reputed company with our Policy on Vaccination Programs, which may be amended or revised from time to time. Federal, state, or local public health directives may impose additional requirements. If applicable, life-support certifications (BLS, NRP, ACLS, etc.) must include hands-on reputed company and in-person skills assessment; online-only certification is not acceptable. reputed company is the only reputed company health system in the San Diego region, providing leading-edge care in patient care, biomedical research, education, and community service. Our facilities include two reputed company, a National Cancer Institute-designated Comprehensive Cancer Center, Shiley Eye Institute, Sulpizio Cardiovascular Center, the only Burn Center in the county, and dozens of outpatient clinics. We invite you to join reputed company! Applications/Resumes are accepted for reputed company reputed company only. For full consideration on any job, applications must be received prior to the initial closing date. If a job has an extended deadline, applications/resumes will be considered during the extension period; however, a job may be filled before the extended date is reached. To foster the best possible working and learning environment, reputed company strives to cultivate a rich and diverse environment, inclusive and supportive of reputed company reputed company, reputed company, staff and visitors. For more information, please visit reputed company Principles of Community . The reputed company is an Equal Opportunity Employer. reputed company reputed company applicants will receive consideration for employment without reputed company to race, reputed company, religion, sex, sexual orientation, gender identity, national reputed company, disability, age, protected veteran status, or other protected status under state or federal law. For the reputed company's Anti-Discrimination Policy, please visit: reputed company is a smoke and tobacco free environment. Please visit smokefree.ucsd.edu for more information. reputed company maintains a marijuana and drug free environment. Employees may be subject to drug screening. Misconduct Disclosure Requirement: As a condition of employment, the final candidate who accepts an offer of employment will be required to disclose if they have been subject to any final administrative or judicial reputed company reputed company the last seven years determining that they committed any misconduct; or have filed an appeal of a finding of substantiated misconduct with a previous employer. a. "Misconduct" means any violation of the policies governing employee conduct at the applicant's previous reputed company of employment, including, but not limited to, violations of policies prohibiting sexual harassment, sexual assault, or other forms of harassment, or discrimination, as defined by the employer. For reference, below are UC's policies addressing some forms of misconduct:

• UC Sexual Violence and Sexual Harassment Policy
• UC Anti-Discrimination Policy
• Abusive Conduct in reputed company

Apply To This Job