Senior Compliance Analyst

University of Washington Medical Center•Seattle, WA

2d•$79,704 - $112,008•Onsite

About The Position

Finance, Planning, and Budgeting (FPB) has an outstanding opportunity for a Senior Compliance Analyst to join their Office of Merchant Services (OMS) team. Reporting to the Assistant Director of Office of Merchant Services (OMS) Compliance Team, the Senior Compliance Analyst serves as a key member of the OMS Compliance Team and is responsible for advancing and maintaining the University's payment card security and compliance program. This position provides strategic and operational support to ensure that more than 350 active merchants and vendors maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS), including current and evolving requirements under PCI DSS v4.0. Working within a complex, decentralized, multi-institutional environment, the Senior Compliance Analyst must develop and apply expertise in payment security, PCI compliance, and risk management while navigating diverse technical infrastructures, business processes, and academic operations. The position partners with stakeholders across the University to assess compliance obligations, identify and mitigate security risks, and recommend practical, risk-based solutions that support business objectives while meeting regulatory and industry requirements. Through proactive compliance management, consultation, education, and oversight, this role helps safeguard the University's ability to process payment card transactions, reduces financial and operational risk, protects institutional reputation, and supports the security of sensitive payment card data across the University enterprise.

Requirements

Bachelor's degree in Computer Science, Information Security, or related field and 5 years of experience in security audits, information technology compliance, or information security-related position or related field. Equivalent combination of education and experience from which comparable knowledge and skills have been acquired may substitute for degree.
Advanced knowledge and hands-on experience with Tableau and Salesforce.
Proficiency in developing meaningful reports and dashboards, analyzing complex datasets, tracking business processes, and providing insights to support compliance, audit, and risk management objectives.
Demonstrated experience in working with diverse groups, stakeholders, and teams; collaborative, inclusive, and service-oriented leadership style and the ability to foster a culture of excellence, accountability, and teamwork.
Experience working in a customer-facing IT, information security, audit, risk management, compliance, or governance environment.
Experience developing, implementing, evaluating, or auditing compliance programs, security controls, risk mitigation strategies, or regulatory frameworks.
Experience creating and maintaining technical and non-technical policies, standards, procedures, guidelines, and supporting documentation.
Knowledge of information security principles, risk management methodologies, internal controls, and industry best practices.
Demonstrated ability to assess business and technical processes, identify compliance gaps, and develop practical, risk-based solutions.
Strong analytical and problem-solving skills, with the ability to interpret complex technical and operational information and apply compliance requirements effectively.
Excellent verbal and written communication skills, with the ability to present technical concepts and recommendations to both technical and non-technical audiences at all levels of an organization.
Demonstrated ability to build effective working relationships and collaborate with diverse stakeholders, including business units, technical teams, vendors, and external partners.
Proven ability to independently manage multiple priorities, projects, and deadlines in a complex and dynamic environment.
Experience researching, analyzing, and preparing reports, recommendations, presentations, and other business communications.
Strong organizational, documentation, and data management skills with exceptional attention to detail.
Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, and Access, or equivalent business productivity tools.
Demonstrated commitment to providing high-quality customer service and consultation while balancing compliance, operational, and business requirements.
Experience working with payment card technologies, merchant services, PCI DSS requirements, payment processors, acquiring banks, or related payment industry standards.
Experience conducting risk assessments, compliance reviews, security assessments, or audit activities in a regulated or complex organizational environment.

Nice To Haves

Professional certification in information security, audit, or risk management, such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), or PCI Professional (PCIP).
Experience working with Salesforce or similar customer relationship management, workflow management, or inventory management systems.
Experience supporting web-based applications, e-commerce environments, or web development technologies.