Research Security Program Manager - Information Solutions (Hybrid-Remote)

Medical University of South Carolina•Charleston, SC

4d•Hybrid

About The Position

Reporting to the Manager of Governance, Risk and Compliance under the Chief Information Security Office, the Research Security Program Manager is responsible for ensuring institutional compliance with federal and state mandates, including NSPM-33, the CHIPS and Science Act, and regulations governing export control, controlled unclassified information (CUI), and foreign influence mitigation. This strategic role directs and oversees the design, implementation, and daily administration of the research security program, interprets and applies relevant policies and regulations, and recommends new or revised initiatives to enhance institutional research security. The Program Manager informs senior research leadership about issues that may impact the program or institutional issues affecting elements of the research security program. Additionally, the Program Manager responds to inquiries from internal and external stakeholders, communicates findings to federal agencies when necessary, and fosters a culture of security across the university’s research enterprise.

Requirements

A bachelor's degree and four years relevant program experience.
Exceptional communication and interpersonal skills with the ability to build trust across diverse stakeholder groups.
Ability to work independently and collaboratively.

Nice To Haves

Experience in cybersecurity, research security, export controls, or federal research compliance at an academic or research institution.
Experience engaging with federal agencies or research sponsors.

Responsibilities

Develop, implement, and maintain cybersecurity components of MUSC’s Research Security Program in alignment with federal requirements, including NIST research cybersecurity resources.
Collaborate with the Information Security Office (ISO) to develop and manage NIST SP 800-171, NIST R8471, and CMMC requirements.
Identify research projects requiring NIST or CMMC controls and support research teams in meeting compliance expectations.
Coordinate integration of IT security resources into the research security program.
Monitor and ensure institutional alignment with CHIPS and Science Act cybersecurity requirements, federal agency guidance, and sponsor-specific expectations.
Manage the institution’s Foreign Travel Security Training Program, ensuring all covered individuals complete required periodic training.
Maintain the foreign travel reporting program for individuals traveling abroad for research, teaching, conferences, or MUSC business.
Provide expert guidance to faculty, staff, and trainees on international engagements, foreign influence, and high-risk outside activities.
Oversee research security risk assessments for international collaborations, visiting scholars, and high-risk foreign engagements.
Lead implementation of comprehensive research security training tailored to MUSC’s risk profile and federal regulations.
Ensure covered individuals complete federally developed or MUSC-approved research security training modules.
Lead training, outreach, and educational activities related to research security.
Provide training content illustrating improper transfer of research or federally funded R&D.
Advise leadership on evolving regulations, risk tolerance, and best practices.
Maintain training documentation, certifications, and compliance records.
Ensure covered individuals engaged in export-controlled research complete required training.
Coordinate delivery of federal or MUSC-developed export control education.
Oversee compliance reviews of foreign sponsors, collaborators, and research engagements to ensure alignment with export control regulations.
Maintain export compliance records and verify sponsor-required certifications.
Design, implement, and maintain MUSC’s comprehensive Research Security Program in accordance with federal and state requirements.
Lead the Research Security Committee, supporting risk assessments, policy development, training needs, and strategic decision-making.
Serve on institutional committees and workgroups related to research compliance and risk mitigation.
Conduct investigations into research-related security concerns and report findings to internal stakeholders and federal agencies as appropriate.
Partner with the Office of Research and Sponsored Programs to ensure compliance with sponsor-required research security certifications.
Serve as the institutional primary point of contact for sponsors, regulators, and external stakeholders on research security issues.
Establish and report on Key Performance Indicators (KPIs) to evaluate program effectiveness.
Stay current on regulatory changes and evolving best practices through engagement in professional organizations and conferences.
Design, implement, and maintain a comprehensive research security program that meets federal and state requirements.
Advise senior leadership on evolving research security regulations, risk tolerance, and best practices.
Lead the Research Security Committee to evaluate institutional risks, formulate research security policies, identify training needs, and support strategic decision-making activities.
Provide expert guidance to faculty, staff, and trainees on international collaborations, foreign influence, and high-risk outside activities.
Conduct investigations into research-related activities that pose security risks and communicate findings to stakeholders, including federal agencies.
Oversee research security risk assessment for university activities, international research collaborations, visiting scholars (etc.,).
Serve on the various committees and workgroups engaged in mitigating risks associated with areas related to the institutional research security program.
Partner with the Office of Research and Sponsored Projects to ensure compliance with research security certifications and sponsor requirements.
Lead training, outreach, and guidance efforts related to research security.
Establish and report on Key Performance Indicators (KPIs) to measure program effectiveness.
Collaborate with Information Security Office (ISO) to develop and manage NIST SP 800-171, NIST R8471, and CMMC requirements.
Identify research projects requiring NIST R8471, CMMC or NIST SP 800-171 compliance and support research teams in meeting requirements.
Serve as the primary institutional point of contact for external sponsors and regulators on research security matters.
Stay current on regulatory changes and best practices through active participation in conferences and professional organizations.