IT Coordinator, Lead IT Compliance Specialist

The Lead IT Compliance Specialist is responsible for helping improve the IT security and compliance security posture of the University of Maryland, College Park. In this position, the successful candidate will work on both the proactive and reactive sides of IT security and IT compliance, helping both the Division of IT as well as other departments with their IT compliance needs and requirements.  Duties include but are not limited to lead the implementation, operation, support, and maintenance of the IT USM Security Standards, develop defensive measures for specific IT departments that process and handle confidential data, as a whole, engage with departmental business and IT staff to develop strategies to improve IT security posture while ensuring that the organization meets all appropriate compliance (legislative, state and federal objectives), ensure appropriate risk mitigation/control measures are in place. The Lead IT Compliance Specialist will audit, review, monitor & manage compliance within the organization and university, Furthermore, the position will require conducting security assessments, developing, testing, auditing systems developing hardening guidelines, conduct risk assessments, and vulnerability analysis. The position will also help educate campus departmental IT staff on best security practices, educate departments in regard to services that the Division of IT Security office offers to departments and enable those departments to make reputable IT security decisions. The position must also set an example for team members demonstrating commitment, compliance activities, work ethic and personal character.

Minimum qualifications

EDUCATION & EXPERIENCE

• Bachelor’s degree from an accredited college or university, and experience within the IT compliance field and at least 6 years’ experience coordinating and auditing IT compliance activities.

• In-Depth knowledge of GLBA, HIPAA, FERPA, PCI/DSS, NIST 800-171, IT-USM Security Standards, Higher Education Community Vendor Assessment Tool Kit and SOC 2.

• Experience with assisting in developing plans for team activities.

• Working knowledge of state auditors.

Preferences: 

• Experience working in Higher Education

• Experience auditing and being audited.

• Supporting change

• Emotional intelligence

• Ability to use independent judgment to manage and impart confidential information.

• Provide feedback by being specific, descriptive and timely.

• Time management skills to ensure time and required resources to complete the task.

• Ability to research, learn and share on all IT-Compliance related technologies.

• Lead, manage and share workloads while initiating, investing, inquiring, and influencing others

• Develop an ongoing campaign to heighten awareness of the various university’s main campus compliance programs

Additional information: this position does not provide sponsorship for visas.

Physical demands: exerting up to 20 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Repetitive motion. Substantial movements (motions) of the wrists, hands, and/or fingers. The worker is required to have close visual acuity to perform activities such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading and writing.