IT Compliance Analyst

Toggle navigation  

IT Compliance Analyst

Bookmark this Posting Print Preview | Apply for this Job

Please see Special Instructions for more details.

In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth's Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly called a Certificate of Disability) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans may also apply via the AHP if they also provide an AHP Letter. To request an AHP Letter, use this link: https://www.dars.virginia.gov/drs/cpid/PWContact.aspx or call DARS at 800-552-5019, or DBVI at 800-622-2155

Posting Details

 Posting Summary 

Working Title  | IT Compliance Analyst
Role Title  | Policy Planning Spcialst II
Role Code  | 19132-FP
FLSA  | Exempt
Pay Band  | 05
Position Number  | 28000957
Agency  | Northern VA Community College
Division  | NV280-VP of College Computing
Work Location  | Fairfax County - 059
Hiring Range  | $95,000 - $105,000
Emergency/Essential Personnel  | No
EEO Category  | 5-Paraprofessionals
Full Time or Part Time  | Full Time
Does this position have telework options? -Telework options are subject to change based on business needs-  | No
Does this position have a bilingual or multilingual skill requirement or preference?  |
Work Schedule  | Monday thru Friday (Standard work week). 8 hours per day.
Sensitive Position  | No
Job Description  | General Description:
The IT Compliance Analyst is responsible for protecting the organization’s digital assets by implementing, monitoring, and maintaining robust cybersecurity controls, systems, and compliance processes. This role ensures that the institution’s information technology systems, processes, and data practices comply with applicable federal and state regulations, industry standards, and institutional policies.

Duties and Responsibilities: Regulatory Compliance & Policy Management: Performs regular reviews, updates, and version control of cybersecurity policies, procedures, standards, guidelines, and supporting documentation. Vendor & Third-Party Risk Management (TPRM): Review, update, and maintain Third-Party Risk Management (TPRM) policies and processes. Cybersecurity Assessments & Internal Controls Preparedness: Track gaps in Internal Controls, ensuring timely follow-up by responsible parties, and prepare readiness reports for senior IT leadership. Security Awareness & Compliance Training: Develop and deliver IT compliance and data privacy training programs (e.g., FERPA, cybersecurity awareness); and track completion rates institution wide. Risk Management & Data Privacy: Conduct periodic IT risk assessments and Privacy Impact Assessments 

Special Assignments  | May be required to perform other duties as assigned. May be required to assist the agency or state government generally in the event of an emergency declaration by the Governor.
KSA's/Required Qualifications  | KSA Requirements: Knowledge, and a capability for clear, concise technical reporting and cross-functional collaboration. Knowledge of IT cybersecurity and privacy principles, including the control requirements of FERPA, HIPAA, PCI DSS, GLBA, and CIS Controls. Demonstrated analytical skills and attention to detail in reviewing cybersecurity policies, procedures, and standards; conducting maturity and risk assessments; and managing supporting compliance evidence. Ability to collaborate with technical teams, vendors, and third-party providers to validate controls and collect compliance evidence (e.g., HECVAT questionnaires, SOC 2 / reports) in support of the Third-Party Risk Management program. Ability to administer security awareness and compliance training programs, including phishing simulations and institution-wide campaigns, and to track completion across the organization. 

Minimum Work Experience: Experience in cybersecurity operations, IT security analysis, risk management, or compliance enforcement. Experience implementing and aligning controls with major security frameworks (e.g., NIST CSF, CIS Controls, PCI DSS, FERPA, HIPAA). Hands-on experience using security, compliance, or administrative tools (e.g., KnowBe4, MS Attack Simulator, CIS CSAT, TeamDynamix)
Additional Considerations  | Additional Considerations: Experience working within a higher education institution or public sector environment. One or more professional certifications such as CompTIA Security+, CompTIA Project+ or ITIL 4 Foundation. Familiarity with GRC (Governance, Risk, and Compliance) platforms or learning management systems (e.g., Canvas).
Operation of a State Vehicle  | No
Supervises Employees  | No
Required Travel  | n/a

 Posting Detail Information 

Posting Number  | CLS_4773P
Recruitment Type  | General Public - G
Number of Vacancies  | 1
Position End Date (if temporary)  |
Job Open Date  | 09/24/2026
Job Close Date  | 10/08/2026
Open Until Filled  |
Agency Website  | www.nvcc.edu
Contact Name  |
Email  |
Phone Number  |
Special Instructions to Applicants  | In support of the Commonwealth’s commitment to inclusion, we are encouraging individuals with disabilities to apply through the Commonwealth’s Alternative Hiring Process. To be considered for this opportunity, applicants will need to provide their AHP Letter (formerly called a Certificate of Disability) provided by the Department for Aging & Rehabilitative Services (DARS), or the Department for the Blind & Vision Impaired (DBVI). Service-Connected Veterans may also apply via the AHP if they also provide an AHP Letter. To request an AHP Letter, use this link: https://www.dars.virginia.gov/drs/cpid/PWContact.aspx or call DARS at 800-552-5019, or DBVI at 800-622-2155
Additional Information  | Northern Virginia Community College (NOVA) is the largest public institution of higher education in the Commonwealth of Virginia and one of the largest community colleges in the nation. NOVA enrolls nearly 75,000 students on its six campuses in Alexandria, Annandale, Sterling, Manassas, Springfield, and Woodbridge, as well as through NOVA Online and high school dual enrollment programs. The College offers more than 100 affordable associate degree and certificate programs to help our students reach their academic and professional goals in some of the most in-demand careers.At NOVA, we are deeply committed to fostering an inclusive community for all students, faculty, and staff, and our diverse workforce is representative of this commitment. To this end, we encourage all applicants seeking to add value through their diverse backgrounds, experiences, and interests to consider employment opportunities with NOVA. To learn more about NOVA’s commitment to inclusive excellence, please visit At a Glance | Northern Virginia Community College. NOVA offers eligible employees a benefits package that includes a comprehensive health and dental insurance program, generous paid leave, deferred compensation plans, paid parental leave, state employee discounts, and a solid and secure retirement program.We strive to ensure our employees have tools and development opportunities to support and promote NOVA’s mission. For more information about NOVA and its programs and services, please visit our website at www.nvcc.edu. The security of our students, faculty, and staff is very important at NOVA. Please take a moment to review NOVA’s Annual Security Reports
Background Check Statement Disclaimer  | The selected candidate’s offer is contingent upon the successful completion of a criminal background investigation, which may include: fingerprint checks, local agency checks, employment verification, verification of education, credit checks (relevant to employment). Additionally, selected candidates may be required to complete the Commonwealth’s Statement of Economic Interest. For more information, please follow this link:  http://ethics.dls.virginia.gov/
EEO Statement  | The Virginia Community College System (VCCS) provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, political affiliation, veteran status, sexual orientation, gender identity or other non-merit factors.
ADA Statement  | The Virginia Community College System (VCCS) is an Equal Employment Opportunity employer and complies with the Americans with Disabilities Acts (ADA and ADAAA), to provide, reasonable accommodation to applicants in need of access to the application, interviewing, and selection processes when requested.
E-Verify Statement  | VCCS uses E-Verify to check employee eligibility to work in the United States. You will be required to complete an I-9 form and provide documentation of your identity for employment purposes.
Quicklink for Posting  | https://jobs.vccs.edu/postings/101621

Supplemental Questions

Required fields are indicated with an asterisk (*).

Applicant Documents

About VCCS

Quick Links

News & Events

© 2020 Virginia Community Colleges • All Rights Reserved

 To ensure the security of your data, you will be logged out due to inactivity in 3 minutes at
 .

 Any data not saved will be lost.

 Click 'OK' to keep your session active.