Security and Compliance Manager - 37537 University Staff

Description

University of Colorado Anschutz Medical Campus

Department: Health Data Compass

Job Title: Security and Compliance Manager

Position #: 00798345 – Requisition #: 37537

Job Summary:

The Security and Compliance Manager plays a critical role in safeguarding Compass’s operations and cloud-based solutions. This position is responsible for reviewing and managing agreements and contracts, developing and maintaining internal policies and procedures, and coordinating efforts to ensure compliance with all applicable state and federal regulations. The manager will lead activities to support HIPAA compliance and alignment with NIST 800 standards, ensuring our systems remain secure and audit-ready. Core responsibilities include evaluating internal and external agreements, creating and maintaining compliance documentation, and overseeing program activities to verify that Compass’s technology and services meet rigorous regulatory and security requirements.

Key Responsibilities:

Business & Research Compliance (35%):

Under the supervision of the DFA, work with Compass staff to support the HIPAA compliance program for Compass cloud systems, including researching, justifying, and documenting compliance controls.
Develop and update applicable system and compliance policies and procedures.
Draft, update, and evaluate internal and external contracts and agreements, including but not limited to: memorandums of understandings (MOUs), business associate agreements (BAAs), statements of work (SOWs), or master service agreements (MSAs).
Coordinate processes for data request delivery with the Security and Compliance Committee including reviewing, editing, modifying, validating documentation to match Internal Review Board (IRB) documentation, and coordinate follow up between data owners, requestors/customers, data analysts, and Business Intelligence (BI) developers.

Health Data Compass Technology (40%):

Manage security and compliance activities, including vulnerability scans and penetration tests, analysis and risk justification of findings, and responding to incidents and issues.
Provide security and compliance input and feedback to Compass management and engineers for technical designs and strategies in support of cloud technology, data warehouse, and infrastructure platforms.
Analyze and document risk analysis and risk assessments for system, architecture designs, applications, or software for use within Health Data Compass (HDC).
Lead, investigate, and document security and privacy incidents, as needed, in accordance with Compass policies and procedures.

Administration (25%):

Manage, coach, and mentor Compass Staff and students to develop professionally, while ensuring goals and performance expectations are met.

This description is a summary only and describes the general level of work being performed, it is not intended to be all-inclusive. The duties of this position may change from time to time and/or based on business need. We reserve the right to add or delete duties and responsibilities at the discretion of the supervisor and/or hiring authority.

Work Location:

Remote – this role is eligible to work remotely, but the employee must be in the United States.

Why Join Us:

Health Data Compass (Compass) serves as the technology innovation hub for the Office of the Vice Chancellor for Health Affairs at CU Anschutz. Our team manages a Google Cloud–based data integration and analytics platform that powers clinical and translational research across the Anschutz Medical Campus. By providing secure, scalable data solutions, Compass enables researchers and clinicians to advance discoveries that improve patient care and outcomes.

Why work for the University?

We have AMAZING benefits and offer exceptional amounts of holiday, vacation and sick leave! The University of Colorado offers an excellent benefits package including:

Medical: Multiple plan options
Dental: Multiple plan options
Additional Insurance: Disability, Life, Vision
Retirement 401(a) Plan: Employer contributes 10% of your gross pay
Paid Time Off: Accruals over the year
Vacation Days: 22/year (maximum accrual 352 hours)
Sick Days: 15/year (unlimited maximum accrual)
Holiday Days: 10/year
Tuition Benefit: Employees have access to this benefit on all CU campuses
ECO Pass: Reduced rate RTD Bus and light rail service

There are many additional perks & programs with the CU Advantage.

Qualifications:

Minimum Qualifications:

Bachelor’s degree in Security Administration, Information Systems, Information Security, Computer Science, Biological or Health Sciences, law or related field.
At least three (3) years working within healthcare industry or federal health agency (e.g. hospital, federal government).
At least two (2) years’ experience with privacy or compliance within regulated environments (e.g. federal government, HIPAA, FISMA, ITAR etc.).
Previous supervisory experience in a similar environment.

Applicants must meet minimum qualifications at the time of hire.

Preferred Qualifications:

Masters or doctorate degree in security administration, information systems, information security, computer science, biological or health sciences, law, or related field.
A Juris Doctor or Doctorate degree in security administration, information systems, information security, computer science, biological or health sciences, law, or related field.
Experience with NIST 800-53, NIST 800-171 or ISO 27000 frameworks.
Experience with DICOM - PACS deidentification and compliance

Knowledge, Skills and Abilities:

Strong interpersonal and excellent written and verbal communication skills.
Organized, with strong attention to detail.
Ability to handle multiple simultaneous tasks and effectively.
Able to work independently, self-starter.
Ability to communicate effectively, both in writing and orally.
Ability to establish and maintain effective working relationships with employees at all levels throughout the institution.
Demonstrated commitment and leadership ability to advance diversity and inclusion.
Attention to detail and accuracy, with strong analytical and critical thinking skills.
Demonstrated effectiveness in a complex organizational environment

How to Apply:

For full consideration, please submit the following document(s):

1. A letter of interest describing relevant job experiences as they relate to listed job qualifications and interest in the position

2. Curriculum vitae / Resume

3. Three to five professional references, including name, address, phone number (mobile number if appropriate), and email address

Questions should be directed to: Kelli Beightler, KELLI.BEIGHTLER@CUANSCHUTZ.EDU

Screening of Applications Begins:

Immediately and continues until position is filled.

Anticipated Pay Range:

The starting salary range (or hiring range) for this position has been established as HIRING RANGE $85,000-$105,000.

The above salary range (or hiring range) represents the University’s good faith and reasonable estimate of the range of possible compensation at the time of posting. This position may be eligible for overtime compensation, depending on the level.

Your total compensation goes beyond the number on your paycheck. The University of Colorado provides generous leave, health plans and retirement contributions that add to your bottom line.

Total Compensation Calculator

Equal Employment Opportunity Statement:

CU is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws governing nondiscrimination in employment. We are committed to creating a workplace where all individuals are treated with respect and dignity, and we encourage individuals from all backgrounds to apply, including protected veterans and individuals with disabilities.

ADA Statement:

The University will provide reasonable accommodations to applicants with disabilities throughout the employment application process. To request an accommodation pursuant to the Americans with Disabilities Act, please contact the Human Resources ADA Coordinator at hr.adacoordinator@cuanschutz.edu.

Background Check Statement:

The University of Colorado Anschutz Medical Campus is dedicated to ensuring a safe and secure environment for our faculty, staff, students and visitors. To assist in achieving that goal, we conduct background investigations for all prospective employees.

Vaccination Statement:

CU Anschutz strongly encourages vaccination against the COVID-19 virus and other vaccine preventable diseases. If you work, visit, or volunteer in healthcare facilities or clinics operated by our affiliated hospital or clinical partners or by CU Anschutz, you will be required to comply with the vaccination and medical surveillance policies of the facilities or clinics where you work, visit, or volunteer, respectively. In addition, if you work in certain research areas or perform certain safety sensitive job duties, you must enroll in the occupational health medical surveillance program.

Application Materials Required: Cover Letter, Resume/CV, List of References

Job Category

: Business Services

Primary Location

: Aurora Department: U0001 -- Anschutz Med Campus or Denver - 21538 - ADM VCHA COMPASS GENOPS

Schedule

: Full-time

Posting Date

: Aug 12, 2025

Unposting Date

: Ongoing Posting Contact Name: Kelli Beightler Posting Contact Email: KELLI.BEIGHTLER@CUANSCHUTZ.EDU Position Number: 00798345

Set your job search on autopilot

Fresh Jobs

Technical Program Manager III, Security and Compliance, Google Cloud

Technical Program Manager III, Networking, Google Cloud

Technical Program Manager III, Manufacturing Test Development, Google Cloud

Technical Program Manager III, Generative AI Serving Efficiency, Google Cloud

Program Manager II, Security and Compliance Governance, Google Cloud

Technical Program Manager III

Technical Program Manager III - New Glenn

Google Cloud Engineer

CloudOps Google Cloud

CloudOps Google Cloud

Security and Compliance Analyst

Security and Compliance Manager

Technical Program Manager III, Software Engineering, Core

Technical Program Manager III, Infrastructure, Cloud AI

Google Cloud Architect Specialist

Google Cloud Data Engineer

Ingeniero/a Google Cloud

Senior - Google Cloud Platform

Google Cloud Project Manager

Manager - Google Cloud Platform

Senior - Google Cloud Platform

Google Cloud Serverless Specialist

Google Cloud Change Manager

Account Executive, Google Cloud

Security and Compliance Lead- Kenya

Security and Compliance Lead- Kenya

IT security and Compliance Manager

Technical Program Manager III, Policy Engineering, Google Home

Technical Program Manager III, Enterprise Networks, Cloud Networking

Technical Program Manager III, AI Software, Google Pixel

Technical Program Manager III, Policy Engineering, Google Home

Technical Program Manager III, System Software, Google Pixel

Technical Program Manager III, Edge Technologies, Google Networking

Technical Program Manager III, Engineering Compliance, Global Affairs

Technical Program Manager III, Advanced Analytics, Data Centers

Assistant Manager - Google Cloud Platform

Assistant Manager - Google Cloud Platform

Technology Commodity Manager, Google Cloud

Solutions Architect Manager, Google Cloud

Solutions Architect, Google Cloud Platform

Field Sales Representative, Google Cloud

Field Sales Representative, Google Cloud

Product Manager I, Google Cloud

Customer Engineer, Enterprise, Google Cloud

Google Cloud Lead Data Engineer

Software Engineer II, Google Cloud

Database Customer Engineer, Google Cloud

Google Cloud Relational Database Engineer

Assistant Manager - Google Cloud Platform

Customer Engineer, Security, Google Cloud