Research Data Security and Compliance Analyst
About The Position
This position is located within the Office of Research Compliance’s Research Information Security unit. The Research Data Security Analyst provides programmatic leadership and technical expertise to secure research data across the University of Maine, contributing to the management of the lifecycle of the research data security program to enable and protect research computing activities within academic units, Research Centers, and Institutes. Working in conjunction with the Office of Research Compliance, the Information Security Office, and UMS:IT, this role oversees the development, implementation, and continuous improvement of research-specific data security procedures, guidance, and infrastructure. Acting as a crucial liaison between research units and IT, the Analyst leverages existing tools to manage security initiatives, support the acquisition of IT infrastructure, and oversees the creation and updating of University of Maine System policies. Furthermore, this position leads the evaluation of data security requirements in research contracts and technology reviews, recommending compliant solutions to protect sensitive data, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), Covered Research Information, Protected Health Information (PHI), and Personally Identifiable Information (PII). Ultimately, the Analyst ensures comprehensive data stewardship by managing the review and compliance tracking of Data Use Agreements (DUAs) and their associated Data Security Plans, serving as a program lead in developing best practices for research data management.
Requirements
- U.S. person status is required for this position to comply with the Arms Export Control and Export Administration Act. U.S. persons are U.S. citizens, legal permanent residents as defined by 8 U.S.C. 1101(a)(20) or protected individuals as defined by 8 U.S.C. 1324b(a)(3).
- Bachelor’s degree in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
- At least three (3) years of relevant work experience.
- Demonstrated professional experience in export controls and/or research security with knowledge of relevant rules and regulations.
- Ability to complete Information Security Certification such as a CISSP, CISA, CISM or GIAC within three years of hire.
Nice To Haves
- Master’s degree or PhD in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
- Five (5) or more years of relevant work experience.
- Demonstrated ability to work autonomously but also within a team environment.
- Demonstrated excellent customer service and communication skills.
- Highly motivated, self-starter with ability to multi-task.
- Experience designing and managing a cybersecurity risk management program based on NIST standards and frameworks.
- Familiarity with NSPM-33 and CHIPS and Science Act of 2022 research security requirements.
- Knowledge of NIST 800 series security requirements and CMMC program requirements.
- Experience facilitating an information system security program within a complex organization.
- Demonstrated working experience at an accredited institution of higher education.
- Demonstrated working experience developing policies and procedures such as detailed documentation and training resources for customers.
- Program or project management experience and/or certification (e.g. PMP, PMI).
- Prior supervisory experience.
- Familiarity with HIPAA Security Rule and Privacy Rule guidelines.
- Eligible for, and able to obtain and maintain at least Secret level security clearance as required to perform assigned duties.
- Information Security Certification such as a CISSP, CISA, CISM or GIAC.
Responsibilities
- Provides programmatic leadership and technical expertise to secure research data across the University of Maine.
- Contributes to the management of the lifecycle of the research data security program.
- Oversees the development, implementation, and continuous improvement of research-specific data security procedures, guidance, and infrastructure.
- Acts as a crucial liaison between research units and IT.
- Leverages existing tools to manage security initiatives.
- Supports the acquisition of IT infrastructure.
- Oversees the creation and updating of University of Maine System policies.
- Leads the evaluation of data security requirements in research contracts and technology reviews.
- Recommends compliant solutions to protect sensitive data, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), Covered Research Information, Protected Health Information (PHI), and Personally Identifiable Information (PII).
- Ensures comprehensive data stewardship by managing the review and compliance tracking of Data Use Agreements (DUAs) and their associated Data Security Plans.
- Serves as a program lead in developing best practices for research data management.
Benefits
- Tuition benefits (employee and dependent)
- Comprehensive insurance coverage including medical, dental, vision, life insurance, and short and long term disability
- Retirement plan options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
