Security and Compliance Manager

University of Colorado Anschutz Medical Campus

Department:
Health Data Compass

Job Title:

Security and Compliance Manager

Position #:  

- Requisition #: 37537

Job Summary:

The Security and Compliance Manager plays a critical role in safeguarding Compass's operations and cloud-based solutions. This position is responsible for reviewing and managing agreements and contracts, developing and maintaining internal policies and procedures, and coordinating efforts to ensure compliance with all applicable state and federal regulations. The manager will lead activities to support HIPAA compliance and alignment with NIST 800 standards, ensuring our systems remain secure and audit-ready.

Core responsibilities include evaluating internal and external agreements, creating and maintaining compliance documentation, and overseeing program activities to verify that Compass's technology and services meet rigorous regulatory and security requirements.

Key Responsibilities:

Business & Research Compliance (35%):

* Under the supervision of the DFA, work with Compass staff to support the HIPAA compliance program for Compass cloud systems, including researching, justifying, and documenting compliance controls.

* Develop and update applicable system and compliance policies and procedures.

* Draft, update, and evaluate internal and external contracts and agreements, including but not limited to: memorandums of understandings (MOUs), business associate agreements (BAAs), statements of work (SOWs), or master service agreements (MSAs).

* Coordinate processes for data request delivery with the Security and Compliance Committee including reviewing, editing, modifying, validating documentation to match Internal Review Board (IRB) documentation, and coordinate follow up between data owners, requestors/customers, data analysts, and Business Intelligence (BI) developers.

Health Data Compass Technology (40%):

* Manage security and compliance activities, including vulnerability scans and penetration tests, analysis and risk justification of findings, and responding to incidents and issues.

* Provide security and compliance input and feedback to Compass management and engineers for technical designs and strategies in support of cloud technology, data warehouse, and infrastructure platforms.

* Analyze and document risk analysis and risk assessments for system, architecture designs, applications, or software for use within Health Data Compass (HDC).

* Lead, investigate, and document security and privacy incidents, as needed, in accordance with Compass policies and procedures.

Administration (25%):

* Manage, coach, and mentor Compass Staff and students to develop professionally, while ensuring goals and performance expectations are met.

This description is a summary only and describes the general level of work being performed, it is not intended to be all-inclusive. The duties of this position may change from time to time and/or based on business need. We reserve the right to add or delete duties and responsibilities at the discretion of the supervisor and/or hiring authority.

Work Location:

Hybrid - This role is eligible for a hybrid schedule of 3 days per week on campus and as needed for in-person meetings.

Why Join Us:

Health Data Compass (Compass) serves as the technology innovation hub for the Office of the Vice Chancellor for Health Affairs at CU Anschutz. Our team manages a Google Cloud-based data integration and analytics platform that powers clinical and translational research across the Anschutz Medical Campus. By providing secure, scalable data solutions, Compass enables researchers and clinicians to advance discoveries that improve patient care and outcomes.

Why work for the University?

We have AMAZING benefits and offer exceptional amounts of holiday, vacation and sick leave! The University of Colorado offers an excellent benefits package including:

* Medical:
Multiple plan options

* Dental:
Multiple plan options

* Additional Insurance:
Disability, Life, Vision

* Retirement 401(a) Plan:
Employer contributes 10% of your gross pay

* Paid Time Off:
Accruals over the year

* Vacation Days: 22/year (maximum accrual 352 hours)

* Sick Days: 15/year…