Research Analyst Jobs

About The Position

Requirements

• A pertinent bachelor's degree in Computer Sciences, Information Security, or a related field, plus five years of progressively responsible professional IT experience involving information security, including two years of experience comparable in scope and complexity to the next lower UH pay band; or an equivalent combination of education and professional experience.
• Considerable working knowledge of information security and the relevant concepts, principles, methodologies, technologies, systems, hardware, and software.
• Ability to identify intricate problems, determine causes through reasoning and logic, and develop and implement effective solutions.
• Ability to interpret and implement administrative directives and guidance in alignment with organizational standards and industry best practices.
• Ability to communicate clearly and accurately in writing and verbally and prepare reports and other materials.
• Ability to establish and maintain effective working relationships with internal and external organizations and individuals.
• For supervisory work, ability to lead subordinates, manage work priorities and projects, and manage employee relations.
• Ability to translate complex federal rules, regulations, and requirements into actionable steps.
• Ability to apply IT concepts and methodologies across a range of research projects and environments.
• Considerable working knowledge and experience with NIST 800-171 and NIST 800-53, including SSPs and POAMs.
• Functional knowledge of information security principles and familiarity with frameworks such as NIST 800-171, HIPAA, or CMMC.
• Strong understanding of IT service management, cybersecurity, risk management, and compliance requirements.
• Demonstrated experience implementing and maintaining IT best practices, standards, and governance.
• Considerable knowledge of information security, privacy, and higher-education laws, rules, and regulations at international, federal, state, and local levels.
• Considerable working knowledge of current information security technologies and tools.
• Considerable work experience in cloud computing or research computing.
• Knowledge of basic computing paradigms, software installation, and commercial cloud platforms such as AWS, GCP, and Azure.
• Understanding of virtual networks, identity management, compute, and storage solutions in commercial cloud environments.
• Working knowledge of computer forensics and investigative techniques.
• Experience with systems, systems administration, and network hardware and administration.
• Ability to develop effective training materials and conduct effective in-person training and workshops.
• Ability to combine and apply skill sets from multiple areas of IT.
• Fluency in speaking, reading, comprehending, interpreting, and writing English.
• Ability to learn and apply new technologies independently and in a timely manner using available resources.
• Working knowledge of common Internet protocols such as TCP/IP and applications.
• Working knowledge of one or more programming or scripting languages.
• Ability to manage multiple projects.
• Ability to travel out of state.
• Ability to work a variable schedule, including outside normally scheduled hours and day, night, weekend, or holiday hours as directed.

Nice To Haves

• Certifications related to information security, such as CISSP, GIAC/GSEC, or CISM.
• Experience configuring and implementing technical security solutions.
• Ability to supervise student employees.
• Cybersecurity experience in or with higher education.

Responsibilities

• Oversee, manage, and maintain UH information security data protection, risk management, and compliance programs.
• Serve as the primary Research Secure Research Enclave (SRE) Technical Analyst.
• Design, implement, and oversee security frameworks for federally funded research, including requirements for CMMC, NIST SP 800-171, NIST SP 800-53, HIPAA, and other applicable regulations.
• Work with researchers and research groups to support adoption and use of secure cloud resources, including AWS, GCP, and Azure.
• Participate in architecture, design, and capacity planning for secure research data enclaves on commercial clouds in coordination with ITS and other teams.
• Conduct computational intake interviews and translate research goals into technical cloud architectures.
• Guide researchers in selecting appropriate cloud services and resources for their workloads.
• Assist with policies for handling, using, and storing FCI, CUI, and HIPAA data in cloud environments.
• Educate and advise researchers on compliance approaches for cloud and local environments.
• Assist researchers in deploying environments aligned with System Security Plans and ensure controls such as MFA, encryption, and log management are operational and compliant.
• Review third-party cloud service implementations for regulated research projects against applicable security standards.
• Respond to help requests and collaborate with Research Cyberinfrastructure and Information Security teams to support researchers while maintaining compliance.
• Map technical controls in cloud deployments to CMMC levels and help remediate gaps.
• Organize workshops and develop training materials, documentation, and tutorials for researchers using secure cloud resources.
• Direct student employees in documenting and organizing evidence for applicable security requirements.
• Assist grant writers with Facilities, Equipment, and Other Resources and Data Management Plan sections, and provide technical cloud cost estimates for grant budgets.
• Help operate and monitor secure cloud systems and perform cloud infrastructure administration.
• Assist with vulnerability assessments of research environments and identify security deficiencies.
• Coordinate with principal investigators and university compliance, legal, and security stakeholders to report regulated-data incidents to federal agencies within required timelines.
• Implement and maintain processes for reporting security violations to appropriate authorities.
• Participate in security incident response and investigations, including emergency situations, and provide remediation support.
• Attend regional or national multi-day trainings, meetings, or conferences.
• Follow and implement UH System Information Technology Services directives and best-practice guidance, and take timely action on recommendations.
• Lead initiatives to improve system reliability, security, and operational efficiency.
• Supervise and mentor IT staff to ensure administrative directives and industry best practices are understood and followed.
• Perform other duties as assigned.