IT Research Security Architect - R106042

University of Louisville • Louisville, KY

412d

About The Position

The Research Security Architect at the University of Louisville is responsible for ensuring the security and compliance of the university's research computing environments. This role involves planning and implementing a comprehensive research information security program, developing and maintaining security measures that meet regulatory requirements, and protecting sensitive research data. The position requires collaboration with various stakeholders, including the Chief Information Security Officer (CISO) and the university's legal team, to ensure adherence to security standards and regulations.

Requirements

• Bachelor's degree in Cyber or Information Security, Information Systems Management, Business, or related discipline.
• Six (6) years of related work experience with an emphasis in information security, compliance, or government.
• Knowledge of security frameworks and federal, state, or industry security regulations including NIST 800-171/CUI.
• Experience with risk management, security plan development, and incident response.
• Proficiency in using security tools and technologies.
• Experience in conducting security audits and assessments.
• Knowledge of technical infrastructure, networks, databases, and systems in relation to IT Security and IT Risk.

Nice To Haves

• Professional certifications such as CISSP, CISM, CISA, or CRISC.
• Experience with NIST's CSF applied to a research computing environment.
• HIPAA, GLBA, FERPA, FISMA, CMMC, DFARS, PCI-DSS, and/or ITAR compliance experience.
• Experience with cloud security in Azure and AWS.

Responsibilities

• Ensure compliance of research computing environments with relevant regulatory requirements such as HIPAA, FERPA, FISMA, CUI, CMMC, DFARS, and ITAR.
• Develop and maintain documentation related to compliance policies, procedures, standards, baselines, and guidelines.
• Align policies and procedures with internal and external security standards and regulatory requirements.
• Communicate information security legislation, contractual obligations, and university policies to stakeholders.
• Lead projects and task forces to assess or develop relevant policies, standards, and procedures.
• Regularly review and update policies and procedures to adapt to new regulations and emerging threats.
• Plan and conduct audits and compliance assessments to identify gaps and develop corrective action plans.
• Determine information security requirements for research computing projects and assess feasibility.
• Conduct risk and technical assessments to identify potential security threats and vulnerabilities.
• Monitor and analyze security incidents and develop effective response plans.
• Develop and deliver training programs on information security best practices and regulatory requirements.
• Promote a culture of security awareness within the research community.
• Stay current with security trends, technologies, and regulatory changes.
• Serve as project manager/lead on research computing security projects.

Benefits

• Full-time position with competitive salary based on experience.
• Equal Employment Opportunity policies ensuring a diverse workplace.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Educational Services
• Education Level: Bachelor's degree