Description This position performs advanced professional work in support of the University's IT governance, risk, and compliance (IT-GRC) program. The Compliance Analyst III is responsible for independently conducting complex compliance assessments, coordinating audit activities, and providing functional leadership across assigned compliance domains. The role interprets regulatory, contractual, and institutional requirements and translates them into actionable risk and compliance activities across systems, services, and third-party environments. The position collaborates extensively with IT, procurement, legal, privacy, and functional units to ensure compliance requirements are consistently applied and aligned with institutional governance processes. The incumbent exercises independent judgment within broadly defined frameworks and provides guidance to stakeholders to support audit readiness, risk management, and compliance maturity.

Example of Duties:

Conducts and Oversees Compliance Assessments:

Independently scopes, plans, and executes complex IT, data protection, and regulatory compliance assessments; evaluates risks and control gaps; and documents findings and recommended mitigation strategies.

Coordinates Audit Activities:

Serves as a primary coordinator for Internal and External Audit engagements, including planning, documentation collection, response development, and remediation tracking.

Performs Contract and Third-Party Risk Review:

Evaluates IT contracts and vendor documentation for security, privacy, and data protection requirements; identifies risks and provides structured recommendations to support decision-making. Provides Compliance Guidance to

Stakeholders:

Advises project teams, system owners, and service managers on compliance requirements and risk considerations throughout the system lifecycle. Aligns Compliance with

Project Governance:

Coordinates compliance activities within established project management processes to ensure required reviews, approvals, and artifacts are completed.

Monitors Regulatory and Policy Changes:

Tracks changes in regulatory, contractual, and institutional requirements; summarizes impacts and assists with implementation planning.

Prepares Reports and Risk Summaries:

Develops compliance reports, audit summaries, and risk documentation to support leadership awareness and decision-making.

Escalates High-Risk or Nonstandard Issues:

Identifies and escalates policy exceptions, high-risk findings, or complex issues requiring leadership review and risk acceptance. Salary is competitive and commensurate with qualifications and experience, while also considering internal equity. Examples of Duties

• Provide functional leadership and coordination of assigned IT governance, risk, and compliance domains, including establishing priorities, sequencing work, and ensuring consistent execution across stakeholders.
• Conduct and oversee complex IT, data protection, and regulatory compliance assessments in accordance with institutional policies, contractual obligations, legislative mandates, and applicable standards.
• Independently determine assessment scope, methodology, and risk prioritization for complex systems, services, and third-party environments; document risks, gaps, and recommended mitigation strategies.
• Serve as the primary coordinator for Internal Audit and External Audit activities within assigned compliance domains, including planning, evidence coordination, response development, and remediation tracking.
• Review and analyze IT contracts and vendor terms for security, privacy, and data protection requirements; prepare structured risk assessments and influence contract risk acceptance decisions through clearly articulated risk positions and mitigation strategies, in coordination with Procurement and IT leadership.
• Define audit response approach, interpret control requirements, and guide stakeholders in developing complete, accurate, and defensible responses.
• Monitor changes in regulatory, contractual, and institutional requirements; interpret applicability and summarize impacts for leadership and stakeholders.
• Contribute expert analytical input to the review, maintenance, and implementation of IT governance, data classification, and compliance policies and standards.
• Provide compliance and risk guidance to project teams, system owners, and service managers to support alignment with governance requirements throughout the system lifecycle.
• Align compliance activities with established project management governance practices by coordinating with project coordinators and resources to ensure required compliance artifacts, reviews, and approvals are incorporated into project lifecycles.
• Prepare compliance status reports, risk summaries, and decision support materials for leadership review.
• Identify non standard, high risk, or exception based issues and ensure appropriate escalation through established governance and risk management processes.
• Collaborate with IT, procurement, legal, privacy, and functional partners to support consistent, risk aware decision making and continuous improvement of compliance practices.

Qualifications 1. High school diploma or equivalent. 2. Any one or any combination totaling two (2) years (24 months) from the following categories: A. College course work which includes Information Systems and Technologies, Computer Science, Cybersecurity, Business, Management, Analytics, or a closely related discipline, as measured by the established conversion table or its proportional equivalent : 30 semester hours equals one (1) year (12 months) Associate's Degree (60 semester hours) equals eighteen months (18 months) 90 semester hours equals two (2) years (24 months) Bachelor's Degree (120 semester hours) equals three (3) years (36 months) B. Progressively more responsible professional experience in IT compliance, governance, risk analysis, audit, audit coordination, third-party assessment, project management, financial and banking activities, and/or contract-related review activities. The following experience is required and can be concurrent with the qualifications listed above and concurrent with one another: 3. One year of demonstrated experience performing complex IT compliance or risk analysis activities within a large or complex organizational environment, including environments subject to financial, privacy, or regulatory oversight. 4. One year of experience coordinating or leading audit and compliance activities, including documentation management, evidence collection, and remediation tracking. 5. Ability to interpret regulatory, contractual, and institutional requirements and clearly communicate impacts and risks to technical and non technical stakeholders.

NOTE:

Relevant experience may include work performed within regulated industries such as banking, financial services, healthcare, higher education, or other environments subject to data protection and regulatory compliance requirements.

Supplemental Information Illinois Residency Requirement:

Pursuant to the State Universities Civil Service System, out-of-state candidates must establish Illinois residency within 180 calendar days of the start date for this position. Tips for Completing a

Civil Service Application:

1. To be eligible for the role, ensure that your application includes a complete and detailed employment history that highlights your relevant full-time and part-time work experience, including start and end dates of employment. 2. Relevant part-time work experience will count towards the qualifications for this position and will be converted to full-time equivalence to calculate the total length of experience. 3. Upload all official transcripts to meet the educational requirements. If the job description specifies a minimum number of college hours, transcripts are mandatory for the successful processing of your application. 4. Veterans who qualify for preference must provide proof of eligibility within ten (10) working days of submitting an application, unless the same proof has already been submitted in a previous application. The required proof of eligibility includes, at a minimum, a copy of the veteran's

DD214/DD215

form (Department of Defense), NGB22 form (National Guard), or Discharge Orders or DD256 Discharge Certificate (Reserves). 5. After the position has closed, your application and supporting materials will be reviewed to determine if you meet the minimum qualifications, including any specialty factors associated with this position. Those who qualify will move forward for Civil Service Examination/Testing. 6. Please monitor your e-mail for further information regarding your application. Emails will be generated from info@schooljobs.com. 7. For more information on Civil Service classifications, please visit the SUCSS web site at sucss.illinois.gov

About Civil Service Examination/Testing:

The Civil Service examination for this classification is based on your application materials and responses to the supplemental questions. No participation other than submission of application materials is required from applicants that qualify to take the exam. If you meet the minimum required qualifications for this position, your application will move forward for examination/testing in which you will receive a score calculated based on your education and experience, and your name will be placed on the active employment register by exam score. This score will be emailed to the email address noted on your application. After the application deadline, the names within the top three scores will be referred to the department for interview. This position is not eligible for employer-sponsored work authorization. Applicants must be legally authorized to work in the United States without the need for current or future university sponsorship to be considered for this role. Sponsorship for Work Authorization is not available.

For more information visit https:

//policies.siu.edu/policies/employment-non-us-citizens.php