Senior Research IT Security Risk and Compliance Analyst

What you'll do

• Audit research IT systems to ensure compliance with established security controls.
• Identify security findings and drive risk items to closure with relevant stakeholders.
• Apply risk assessments and control sets including CMMC, NIST 800-171, and HIPAA.
• Manage the development of policies, guidance, and procedures for research information security.
• Review third-party documentation to determine and communicate information security risks.
• Create research-specific training and documentation, including System Security Plans.
• Lead continuous monitoring and assist with security operations for research IT systems.
• Participate with the Incident Response Coordinator to respond to incidents involving research systems.

What we're looking for

• 5-7 years of experience working with researchers and regulated data.
• Well-rounded technical background in IT, including software development, DevSecOps, systems, IoT, and risk management.
• Familiarity with risk assessments and control sets including CMMC/NIST 800-171 and HIPAA.
• Proficiency in Microsoft Office Suite and document-sharing tools like Google Docs and Box.
• Ability to communicate effectively in writing and orally with technical, end-user, and executive audiences.
• Passed the CMMC Certified Professional (CCP) exam or able to do so within the first 3 months of employment.
• Successful background check.
• Bachelor’s Degree.