Compliance and Validation Manager - Pittsburgh, PA

Health Sciences IT (HSIT) is looking for a person to manage compliance and validation of various computer systems and processes. The HSIT Research team provides support for the six schools of the health sciences. The compliance and validation manager will be responsible for researching and understanding various governmental standards and security requirements such as NIST 800-171, Part 11 compliance, HIPAA, etc. and translating those standards to requirements for validation procedures for our systems as well as maintaining and updating documentation to maintain compliance.
 

The incumbent will need to have a basic understanding of networks, firewalls, and server infrastructure to the level they can effectively communicate with server engineers and create appropriate documentation. Experience with HIPAA, FISMA, 21 CFR Part 11, or various NIST compliance and validation are required.

The compliance and validation manager will handle writing/reviewing various policies and procedures, POA&M documents and SSPs. The incumbent will also validate systems as updates are completed by updating and expanding documentation as well as performing various systems tests to ensure the system is validated after updates. This person will also review/audit systems updating SSPs and other documentation as needed to comply with various security standards and policies. Audits on existing systems and review of user actions will also need to be completed on a regular basis.

The compliance and validation manager will work closely with other team members such as system architects, IT security, web developers, and system engineers to create plans in which compliance with various standards can be achieved. The incumbent will work to ensure new templates or processes created for human subject research studies are compliant with federal requirements, for example 21 CFR Part 11. Meticulous attention to
detail and excellent documentation skills are required.

Job Summary
Manages the day-to-day performance of compliance assessment projects or programs and resolves compliance issues and ensures compliance. Fosters internal controls, compliance procedures, and compliance audit programs. Assists in all components of audits.

Essential Functions 
- Review and understand government and industry security standards and regulations as needed and translate those to requirements documentation to validate and ensure systems/process compliance.
- Keep required systems documentation up-to-date and accurate working with system engineers to ensure controls are in place and properly met.
- Create System Security Plans, POA&M, vulnerability analysis for various research systems to ensure compliance.
- Perform internal audits to ensure user and administrative compliance. This can include validating sensitivity of files leaving the secure env., reviewing processes and activities of system engineers, and updating policies and procedures, etc.
- Work with Pitt Digital security to ensure our path aligns with the University.
- Work with external and internal auditors to ensure documentation is readily available and in order.
- Create templates for study teams to comply storage and security requirements to ensure study teams know proper processes. Verify these templates with ORP and OSP and coordinate changes with these offices.

Physical Effort 
Light, Little physical effort. Duties are primarily Sedentary. May be required to move objects up to 25 pounds occasionally.

 
The University of Pittsburgh is an equal opportunity employer / disability / veteran.

 
Assignment Category Full-time regular
Bargaining Unit Eligibility This position is bargaining unit eligible
Job Classification Staff.Compliance Manager
Job Family Compliance & Audit
Job Sub-Family Compliance
Campus Pittsburgh
Minimum Education Level Required Bachelor's Degree
Minimum Years of Experience Required 3
Will this position accept substitution in lieu of education or experience? Combination of education and relevant experience will be considered in lieu of education and/ or experience requirement.
Work Schedule Monday through Friday, 8:30am to 5pm; in office 3-4 times per quarter or as required for meetings
Work Arrangement Hybrid: Combination of On-Campus and Remote work as determined by the department.
Hiring Range TBD Based Upon Qualifications
Relocation Offered No
Visa Sponsorship Provided No
Background Check For position finalists, employment with the University will require successful completion of a background check
Child Protection Clearances Not Applicable
Required Documents Resume
Optional Documents Not Applicable