Information Security Analyst for Research

UNC-Chapel Hill • Chapel Hill, NC

7d

About The Position

The Information Security Analyst for Research serves as the primary information security expert for Sheps( DATA )+. The analyst supports system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements. Working alongside technical staff, the analyst helps ensure system architectures, application designs, and operational workflows align with applicable compliance frameworks and that appropriate institutional offices are engaged. The role fulfills system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

Requirements

• Demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments.
• Working knowledge of relevant security and privacy frameworks, such as HIPAA, NIST, ISO 27001/27002, SOC 2, or comparable standards.
• Experience supporting security planning, risk assessment, vulnerability management, or security testing activities.
• Ability to communicate security requirements clearly to technical and non-technical audiences.
• Strong organizational skills and ability to coordinate documentation, reviews, and follow-up activities across multiple systems or stakeholders.

Nice To Haves

• Experience in a research, academic, health care, or public-sector environment involving regulated or sensitive data.
• Familiarity with University information security processes, data use agreements, business associate agreements, or third-party security assessments.
• Experience working with cloud-hosted systems, secure research computing environments, or application development teams.
• Ability to develop templates, guidance materials, or repeatable processes that improve security planning and compliance operations.
• Relevant security, privacy, audit, or risk management certification, such as CISSP, CISA, CISM, Security+, or a comparable credential.

Responsibilities

• Support system and development teams in designing and operating systems and applications that meet security and privacy requirements.
• Work with technical staff to align system architectures, application designs, and operational workflows with applicable compliance frameworks.
• Ensure appropriate institutional offices are engaged.
• Fulfill system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed