• Risk and Compliance Manager

    University of North Carolina- Chapel Hill (Chapel Hill, NC)


    Employment Type: Permanent Staff (EHRA NF)

     

    Vacancy ID: NF0009088

     

    Salary Range: $130,000 - $138,835

    Position Summary/Description:

    This position is a 100% remote work arrangement, consistent with System Office policy. UNC Chapel Hill employees are generally required to reside in North Carolina, within a reasonable commuting distance of their assigned duty station.

     

    Information security at UNC Chapel Hill is building a program capable of meeting the institution’s security challenges of tomorrow. We seek a Manager of the Risk and Compliance team. Engaging with faculty and staff across all parts of the University, this team is responsible for assessing whether technology meets institutional and external security requirements, evaluating options when the default controls cannot be implemented, maintaining several critical cybersecurity compliance programs, and providing security consultations for departments and major initiatives.

     

    Working under minimal supervision, the Manager is responsible for delivering scalable, effective solutions to meet security program goals. The Manager represents the Information Security Office within the University when discussing risk and compliance topics. The Manager coordinates work necessary to deliver our HIPAA , PCI , and Research Security (e.g., NIST 800-171, NIST 800-53, CMMC , others) compliance program outcomes. The Manager collaborates with other Information Security Office teams, such as Detection and Response, in order to update Risk methods and recommend changes to University policy. The Manager provides support and guidance for the professional development of the Risk and Compliance security analysts. The Manager also participates in security program planning, prioritization, and preparation of periodic updates to our Board of Trustees.

    Education and Experience:

    + Experience leading large, enterprise-level projects and information technology implementations.

    + Experience managing information technology professionals in a university environment.

    + Information security training and/or certifications, e.g., CISSP .

    Essential Skills:

    + Experience in information technology and Information Security.

    + Experience managing information technology professionals.

    + Supervisory experience is required.

    AA/EEO Statement:

    The University is an equal opportunity employer and welcomes all to apply without regard to age, color, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, or sexual orientation. We encourage all qualified applicants to apply, including protected veterans and individuals with disabilities.