Pay Grade/Pay Range:  Minimum: $74,200 - Midpoint: $100,200 (Salaried E12)

Department/Organization: 200721 - Enterprise Technology

Normal Work Schedule: Monday - Friday 8:00am to 5:00pm

Note to Applicants: Position is eligible for hybrid work subject to University policy.

Job Summary: The Information Security Compliance Analyst III develops, implements, and maintains information security policies, procedures, and controls of research systems, especially those supporting Classified Information and Controlled Unclassified Information (CUI). Ensures compliance with federal, state, and organizational regulations. Conducts regular security assessments, risk assessments, and vulnerability scans. Identifies and assesses risks associated with research systems. Collaborates with stakeholders to develop risk mitigation strategies and action plans. Monitors and reports on security incidents and vulnerabilities. Develops and maintains security awareness training for researchers. Maintains records of policies, procedures, and incidents. Conducts regular audits to assess compliance and identified areas for improvement. Prepares reports for management and regulatory bodies.

Required Minimum Qualifications: Master's degree and two (2) years of IT security compliance or analysis experience; OR bachelor's degree and four (4) years of IT security compliance or analysis experience; OR associate's degree and six (6) years of IT experience to include four (4) years of IT security compliance or analysis; OR High school diploma or GED and eight (8) years of IT experience to include four (4) years of IT security compliance or analysis.

Must be able to obtain and maintain security clearance. Must be a U.S. Citizen or U.S. Permanent Resident.

Additional Required Department Minimum Qualifications: Experience managing cloud platforms. Experience with PowerShell or Python scripting.

Skills and Knowledge: Knowledge of protecting information and systems within Classified and Controlled Unclassified Information (CUI) environments. Basic troubleshooting and networking skills. Good communication skills. Ability to work closely with internal teams and customers to ensure positive outcomes.

Preferred Qualifications: Experience with Azure government clouds (GCC, GCC High, DoD). Experience with Commvault. Experience in higher education or defense research environments. Current DoD 8570 IAM Level III or IAT Level III certifications are a plus. (DoD Approved 8570 Baseline Certifications – DoD Cyber Exchange). Understanding of NIST SP 800-171 and CCMC security requirements.

Background Investigation Statement: Prior to hiring, the final candidate(s) must successfully pass a pre-employment background investigation and information obtained from social media and other internet sources. A prior conviction reported as a result of the background investigation DOES NOT automatically disqualify a candidate from consideration for this position. A candidate with a prior conviction or negative behavioral red flags will receive an individualized review of the prior conviction or negative behavioral red flags before a hiring decision is made.

About University of Alabama, Tuscaloosa

As the state’s flagship university, The University of Alabama family has always focused on being the best. After all, we are The Capstone of Higher Education. Founded in 1831 as the state’s first public college, The University of Alabama is dedicated to excellence in teaching, research and service. We provide a creative, nurturing campus environment where our students can become the best individuals possible, learn from the best and brightest faculty, and make a positive difference in the community, the state and the world. You’ll like what you find here. Become part of The University of Alabama family.

Connections working at University of Alabama, Tuscaloosa