Sr. Research IT Security Risk and Compliance Analyst

University of New Hampshire

About The Position

The Senior Research IT Security Risk and Compliance Analyst assesses, documents, and implements controls for University research and advises stakeholders on sound business practices. The role supports research information security by identifying and addressing security findings, maintaining related policies and procedures, assessing third-party documentation, and helping researchers determine appropriate technical environments and security requirements. It also assists with security operations and participates in incident response for IT systems, primarily those used for research.

Requirements

Bachelor’s degree.
5–7 years of experience working with researchers and regulated data.

Responsibilities

Identify security findings and help drive risk items to closure with the appropriate stakeholders.
Apply knowledge of risk assessments and common control sets for CMMC/NIST 800-171.
Manage documentation and development of policies, guidance, and procedures related to research information security.
Write documentation, gather evidence, investigate existing processes and regulations, and implement best practices.
Maintain an understanding of the relationship between security and research and attend closely to detail.
Partner with internal campus stakeholders on processes and controls.
Review third-party documentation to assess information security risk and communicate risks to stakeholders.
Communicate effectively in writing and orally with technical, end-user, and executive audiences.
Interface with researchers to identify information security and technical requirements and help them find an appropriate environment.
Assist with security operations related to specific IT systems, primarily research systems.
Participate with the Incident Response Coordinator in responding to incidents involving specific IT systems, primarily research systems.