Compliance & Validation Manager

Job Description

Day-to-Day Responsibilities Manage compliance verification and validation activities across IT systems (individual contributor role; no direct reports). Ensure research-related systems are documented and aligned with regulatory and security requirements. Support ongoing compliance efforts related to NIST 800-171 by documenting security controls and validating implementation. Maintain compliance documentation for key research systems, including REDCap and other regulated platforms. Coordinate validation efforts when system changes, upgrades, or enhancements require re-assessment and re-validation. Partner with infrastructure, application support, testing, and security teams to validate technical controls and maintain documentation. Collaborate with data managers, project managers, and stakeholders supporting research and compliance initiatives. Provide support around Institutional Review Board (IRB)-related systems by ensuring documentation and controls are properly maintained.

Job Description The University of Pittsburgh's Health Sciences Information Technology (HSIT) team is seeking a Compliance & Validation Manager to support ongoing security, compliance, and validation initiatives within research and regulated environments. This individual will focus on documenting and validating security controls, maintaining compliance artifacts, and ensuring critical systems align with HIPAA, NIST 800-171, and other applicable research requirements. The ideal candidate will have experience working with compliance frameworks, security documentation, infrastructure concepts, and validation processes. This role will collaborate closely with infrastructure, application support, testing, and research teams to ensure systems remain compliant, properly documented, and audit-ready as changes occur across the environment. While this position will oversee compliance activities and coordination efforts, it is not a people-management role.

Skills and Requirements

Must-Have Qualifications Strong understanding of security controls, including the ability to interpret, document, and validate control requirements. Bachelor's degree or higher in Information Technology, Cybersecurity, or a related field. Minimum of 3 years of experience in compliance, security, validation, or a related discipline. Knowledge of server and network infrastructure concepts. Experience supporting HIPAA-compliant environments. Familiarity with NIST frameworks, particularly NIST Moderate or NIST 800-171 compliance requirements. Preferred Qualifications Experience working within a Higher Education environment. Experience developing or maintaining System Security Plans (SSPs). Experience performing compliance gap assessments and remediation planning. Understanding of research compliance and regulated environments.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].