Senior Solutions Analyst

#CA-FT

The Senior Solutions Analyst plays a critical role in ensuring that research environments at UC Davis Health meet the necessary security, privacy, and compliance standards required for human subject research. This position supports researchers across multiple campuses in preparing compliant data environments that pass inspection by the Chief Information Security Officer (CISO). The role requires expertise in compliance frameworks such as HIPAA, CMMC Level 2 (NIST SP 800-171), and FBI CJIS Security Policy version 5.9.3. The analyst is also responsible for documenting research designs to demonstrate adherence to compliance standards and facilitate grant submissions.
This position will provide essential insights for research leadership in the School of Medicine.

Apply By Date: April 7, 2025 at 11:59pm. Selection activities may start at any time.

Minimum Qualifications - For full consideration, applicants are encouraged to upload license and/or certification if required of the position

• Bachelor of Science degree in related area from accredited institution
• Minimum 5+ years work experience in IT Security field
• This role requires independent decision-making to address compliance gaps in both physical and data environments.
• The Senior Solutions Analyst must analyze risks related to both physical security and data protection and devise solutions that align with research goals and regulatory requirements.
• This position has the authority to recommend or implement compliance solutions and procedures independently.
• Must have familiarity with security standards such as NIST and CJIS.

Preferred Qualifications

• Master of Science degree in related area and / or equivalent experience / training
• Preferred 7+ years work experience in IT Security field
• Familiarity with NIST SP 800-53, Cybersecurity Framework, and Privacy Framework.
• Expertise in deidentification techniques (Safe Harbor and Expert Determination).
• Certifications such as CIPP, CIPT, or AWS Certified Solutions Architect.
• Experience with other compliance standards like GDPR or FedRAMP.
• Have "the heart of a teacher" or the ability to help highly intelligent individuals understand the complex implications of meeting compliance standards in their research, guiding them with patience and kindness but persistent insistence on truth over spin.

Key Responsibilities

• 30% - Senior Security Architect
• 30% - Evaluate Risk Assessments & Review Security Technologies
• 20% - Application, Software, and System Analysis
• 20% - Project Management

Department Overview

The UC Davis Health, Data Center of Excellence (DCOE) leads, manages, coordinates, administers, and implements major business and scientific technology projects and grants on a statewide and national level for the UC Davis Health. This organization is unique because: it not only requires its employees to have IT competency, but also scientific and business expertise in Biomedical Informatics. Project sponsors and partners that are served by this unit include internal and external Principal Investigators, pharmaceutical companies, governmental agencies, and a variety of commercial companies. Housed within the UC Davis Health Information Technology (IT) Division in partnership with the School of Medicine and the Clinical and Translational Science Center Biomedical Informatics Program (CTSC), this organization provides data management, enterprise database support, computing infrastructure, and technology support services to UC Davis' nationally recognized business and research initiatives.

Department Specific Job Scope

The IT Security Analyst 4 (ITSA4) is a Senior IT Security Architect / Programmer / Project Manager, possesses advanced knowledge, skills, and experience which can be applied to major projects. This position plays a strategic role in securing a research technology environment that will impact the UC Davis enterprise, along with awarded statewide and national projects. A primary responsibility of the ITSA4 is to analyze and assess compliance needs to design secure, compliant data environments for human subject research, including both data-centric and physical security controls, while guiding researchers in preparing their environments for CISO inspection and attestation, ensuring they meet standards like HIPAA, CMMC 2 Level 2, NIST SP 800-171, and FBI CJIS Security Policy version 5.9.3, with attention to both physical and digital security requirements. The ITSA4 analyst must ensure compliance with physical security requirements, such as access control to research facilities, secure storage of devices, and protections against unauthorized physical access to systems and data. They will identify and address risks in both physical and data environments, including endpoint devices, to ensure compliance.

POSITION INFORMATION

• Salary or Pay Range: $8,283.33 - $16,366.67
• Salary Frequency: Monthly
• Salary Grade: Grade 25
• UC Job Title: IT SCRTY ANL 4
• UC Job Code: 000661
• Number of Positions: 1
• Appointment Type: Staff: Career
• Percentage of Time: 100
• Shift (Work Schedule): M-F 8am-5pm
• Location: UCDHAS Building (HSP165)
• Union Representation: 99 - Non-Represented (PPSM)
• Benefits Eligible: Yes
• This position is hybrid (mix of on-site and remote work)
• This position is not an H-1B visa opportunity.

Benefits

Outstanding benefits and perks are among the many rewards of working for the University of California. UC Davis offers a full range of benefits, resources and programs to help you bring your best self to work, as well as to help you and your family achieve your health, wellness, financial and career goals. Learn more about the benefits below and eligibility rules by visiting either our handy Benefits Summary for UC Davis Health Employees or Benefits Summary for UC Davis Employees and our Benefits Page.

If you are represented by a union, benefits are negotiated between the University of California (UC) and your union and finalized in a contract. Read your bargaining unit's employment contract, stay abreast of current negotiations and learn about collective bargaining at UC: https://ucnet.universityofcalifornia.edu/labor/bargaining-units/index.html

* High quality and low-cost medical plans to choose from to fit your family's needs
* UC pays for Dental and Vision insurance premiums for you and your family
* Extensive leave benefits including Pregnancy and Parental Leave, Family & Medical Leave
* Paid Holidays annually as stipulated in the UC Davis Health Policies or Collective Bargaining Agreement
* Paid Time Off/Vacation/Sick Time as stipulated in the UC Davis Health Policies or Collective Bargaining Agreement
* Continuing Education (CE) allowance and Education Reimbursement Program as stipulated in the UC Davis Health Policies or Collective Bargaining Agreement
* Access to free professional development courses and learning opportunities for personal and professional growth
* WorkLife and Wellness programs and resources
* On-site Employee Assistance Program including access to free mental health services
* Supplemental insurance offered including additional life, short/long term disability, pet insurance and legal coverage
* Public Service Loan Forgiveness (PSFL) Qualified Employer & Student Loan Repayment Assistance Program for qualified roles
* Retirement benefit options for eligible roles including Pension and other Retirement Saving Plans. More information on our retirement benefits can be found here
* UC Davis cares about building a community, which is why we provide resources to enhance diversity, equity and inclusion as well as Employee Resource Groups (ERGs) to support our staff

Physical Demands

• Standing - Frequent 3 to 6 Hours
• Walking - Frequent 3 to 6 Hours
• Sitting - Frequent 3 to 6 Hours
• Lifting/Carrying 0-25 Lbs - Occasional Up to 3 Hours
• Pushing/Pulling 0-25 Lbs - Occasional Up to 3 Hours
• Bending/Stooping - Occasional Up to 3 Hours
• Squatting/Kneeling - Occasional Up to 3 Hours
• Keyboard use/repetitive motion - Occasional Up to 3 Hours

Mental Demands

• Sustained attention and concentration - Frequent 3 to 6 Hours
• Complex problem solving/reasoning - Frequent 3 to 6 Hours
• Ability to organize & prioritize - Frequent 3 to 6 Hours
• Communication skills - Frequent 3 to 6 Hours
• Numerical skills - Occasional Up to 3 Hours
• Constant Interaction - Occasional Up to 3 Hours
• Customer/Patient Contact - Occasional Up to 3 Hours
• Multiple Concurrent Tasks - Frequent 3 to 6 Hours

Work Environment

UC Davis is a smoke and tobacco free campus effective January 1, 2014. Smoking, the use of smokeless tobacco products, and the use of unregulated nicotine products (e-cigarettes) will be strictly prohibited on any UC Davis owned or leased property, indoors and outdoors, including parking lots and residential space.

Special Requirements - Please contact your recruiter with questions regarding which activities apply by position

• This is a critical position, as defined by UC Policy and local procedures, and as such, employment is contingent upon clearing a criminal background check(s) and may include drug screening, medical evaluation clearance and functional capacity assessment
• This position is designated as a mandated reporter under CANRA and UC policy, and employment is contingent on compliance with applicable policies, procedures and training requirements

Misconduct Disclosure Requirement: As a condition of employment, the final candidate who accepts a conditional offer of employment will be required to disclose if they have been subject to any final administrative or judicial decisions within the last seven years determining that they committed any misconduct; received notice of any allegations or are currently the subject of any administrative or disciplinary proceedings involving misconduct; have left a position after receiving notice of allegations or while under investigation in an administrative or disciplinary proceeding involving misconduct; or have filed an appeal of a finding of misconduct with a previous employer.

Diversity, Equity, Inclusion and Belonging

At UC Davis, we're solving life's most urgent challenges to bring a fuller, healthier, and more resilient world within reach. We grow from every challenge we take on and we don't just maintain - we improve. We recognize that creating an inclusive and intellectually vibrant organization means understanding and valuing both our individual differences and our common ground. The most comprehensive solutions come from the most diverse minds and you belong here. As you consider joining UC Davis, please explore our Principles of Community, our Clinical Strategic Plan and strategic vision for research and education, and our latest efforts to outgrow the expected. The University of California, Davis is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age or protected veteran status.

For the University of California's Affirmative Action Policy, please visit: https://policy.ucop.edu/doc/4010393/PPSM-20

For the University of California's Anti-Discrimination Policy, please visit: https://policy.ucop.edu/doc/1001004/Anti-Discrimination

Because we want you to be seen, our recruiting process at UC Davis fosters authenticity, diversity, and inclusion. Studies have shown that some people may not apply to jobs unless they meet every single qualification. Each unique role at UC Davis has a set of requirements and you could be perfect for this role, or you could be perfect for the next role! Don't meet all the requirements? We still encourage you to apply! #YouBelongHere

To learn more about our background check program, please visit: https://hr.ucdavis.edu/departments/recruitment/ucd/selection/background-checks