IT Policy and Compliance Analyst

Working Title:
IT Policy and Compliance Analyst

State Role

Title:

Information Technology Specialist II

Position Type: Full-time Staff (Classified)

Position Status: Full-Time

FLSA Status: Exempt:
Not Eligible for Overtime

College/Division: Information Technology

Department: 100784 – IT Policy and Compliance

Pay Band: 5

Pay Rate: Pay Rate

Specify Range or Amount: $65,000 - $70,000

Is this a JMU only position?No

Is this a grant-funded position?No

Is this a Conflict of Interest designated position?No

Beginning Review Date: 9/17/2026

At James Madison University (JMU), we’re more than just a publicly funded institution — we’re a vibrant, welcoming community located on a stunning campus where innovation, collaboration, and personal growth thrive. Our mission is to prepare students for a bright future, and we believe that starts with supporting the people who make it all possible: our employees.

We offer a comprehensive benefits package designed to support your professional journey and personal wellbeing:

• Generous Leave:
  Enjoy paid vacation, sick leave, parental leave, community service leave, and 19 paid holidays annually.
• Comprehensive Health Coverage:
  Access high-quality health insurance options that fit your needs.
• Retirement Options:
  Plan for your future with retirement benefits through the Virginia Retirement System.
• Employee Well-Being:
  Our Balanced Dukes program promotes wellness and work-life integration through resources, events, and support.
• Tuition Waiver Program:
  Advance your education with our tuition waiver program for undergraduate and graduate courses taken at JMU.

At JMU, we believe in Being the Change — and that starts with creating an environment where you can grow, contribute meaningfully, and feel supported every step of the way.

Discover what makes JMU a great place to work: bit.ly/JMUEmployment

James Madison University is accepting applications for an Information Technology Policy and Compliance Analyst to provide support for Information Technology's Third-Party Vendor Management Program. The successful candidate will assist IT in ensuring compliance with applicable information technology regulations, policies, and standards.

This position is eligible for a hybrid work schedule.

• Prepare information security operations reviews of on-premises and cloud-based IT systems and services to ensure alignment with university polices and compliance regulations.
• Perform annual reviews of existing systems to ensure continued information security compliance.
• Analyze SOC 2 or other independent security audit reports that attest to a vendor’s security policies, procedures, and controls.
• Provide assistance with IT’s Third-Party Vendor Management Program by serving as a member of the Technology Review Board.
• Educate and provide guidance to key partners related to JMU’s information technology risk management requirements.
• Assist with the administration of IT’s security awareness and compliance training program.
• Ensure information technology compliance records are organized and complete in accordance with applicable regulations, policies, standards, and best practices.
• Demonstrate honesty, integrity, and confidentiality in the handling of university and vendor data.

• Demonstrated knowledge or experience in computer science, information technology, technical writing, business administration, or related field.
• Experience with information technology vendor risk assessment or vendor compliance.
• Strong security awareness and experience interpreting technical information, especially related to information technology best practices.
• Excellent writing skills, with the ability to create clear requirements,…