IT Security Compliance Analyst

Department: Information Services
Appointment Type and Duration: Regular, Ongoing
Salary: $78,000 - $88,000 per year
Compensation Band: OS-OA08-Fiscal Year 2025-2026
FTE: 1.0

Application Review Begins

Position closes March 30, 2026

Special Instructions to Applicants

To be considered for this position, applicants must submit a complete application. A complete application includes:

• A resume that clearly outlines your work history, including the month and year for the start and end dates.
• A cover letter that addresses how you meet the minimum qualifications and, if applicable, any preferred qualifications. Use your cover letter to share what draws you to this position, what transferable skills you bring, and how your experiences have prepared you to contribute meaningfully in this role.

We are committed to finding the best candidate for this role. Even if you do not meet every preferred qualification, we encourage you to apply.

If you have questions about the application process or the position, please reach out to fass@uoregon.edu

Department Summary

Information Services (IS) is the central information technology unit at the University of Oregon and provides wide ranging services to campus. Information Services consists of four major functional areas: Customer Experience, which serves as the key contact point for interactions with campus clients and customers; Applications & Middleware, which manages and supports applications, integration services, identity management and data management; Information Security, which helps protect virtual or physical information; and Technology Infrastructure, which provides administration and support for the software, hardware, and services needed to support the campus IT environment. Information Services also includes the Advanced Network Technology Center. IS works closely with the Network for Education and Research in Oregon.

Established in 1876, the University of Oregon offers a breadth and depth of curricula with more than 270 academic programs and provides the opportunity to work at a respected research university with a strong holistic, liberal arts foundation. The UO also has a history of political and social involvement that embraces diverse beliefs, cultures, and values, and it is committed to environmental responsibility.

The university is also proud of the Phil and Penny Knight Campus for Accelerating Scientific Impact, an initiative specifically designed to fast-track scientific discoveries and the process of turning those discoveries into innovations that improve the quality of life for people in Oregon, the nation and beyond. Information Services collaborates with Research and Innovation and our schools and colleges to support the research, teaching, and learning mission of the university.

Eugene is the home of the University of Oregon. Located in the lush Willamette Valley, Eugene is well-known for outdoor pursuits like running, cycling, rafting, and fishing, as well as arts, music, crafts, brewing, wine-making, and community-supported agriculture. With branches in Portland and on the Oregon coast, the UO is deeply connected to Oregon's natural and cultural treasures.

Position Summary

Reporting to the Director of IT Security Risk & Compliance, the IT Security Compliance Analyst is part of the Information Security Office (ISO) team. This is a technical position, responsible for the development, assessment and evaluation of Identity and Access Management (IAM) security controls; implementation and evaluation of short-term and long-term goals and objectives, and for strategically aligning campus IT security and compliance needs with university policies, relevant laws, regulations, and requirements for the protection of enterprise systems and data, operational technologies (OT) and other internet of things (IoT) deployed at the University.

The IT Security Compliance Analyst will maintain a clear understanding of the research, academic and operational needs of the university, including its infrastructure, assets, identities, and associated risks. This will involve working with various stakeholders, such as business units, IT teams, cybersecurity teams, risk managers, auditors, and vendors, to help drive security of access control initiatives in support of internal policies, regulatory compliance, and industry standards. In addition, maintain an overview of authentication processes of the new and existing systems deployed across campus and provide high-level situational awareness and warnings about any security lapses.

As part of the ISO team, the person in this role will collaborate with other members of