The Senior Research IT Security Risk & Compliance Analyst will assess, document, and implement various controls for University research. This individual manages the control documentation and advises on best business practices for all stakeholders. The incumbent is responsible for managing processes related to the information security of regulated research, systems audit assistance, coordination, and support e.g., internal audit for information security. This requires familiarity with risk assessments, privacy regulations, standards, and sets of controls. The incumbent will have a well-rounded technical background in Information Technology IT. This includes and is not limited to software development, DevSecOps, systems, IoT, help desk, risk management, information security, and emerging technology such as agentic-AI.Your core responsibilities will include: Audit Research IT systems and ensure established controls are being followed.Identify security findings and assist in driving risk items to closure with the correct stakeholders.Apply familiarity with risk assessments and common control sets, including the Cybersecurity Maturity Model Certification CMMC/NIST 800-171 and Health Insurance Portability and Accountability Act HIPAA.Lead compliance projects involving multiple stakeholders within established deadlines.Manage the documentation and development of policies, guidance, and procedures related to research information security for the University’s Information Security Office ISO.Write, gather evidence, investigate existing processes and regulations, and implement best practices.Demonstrate quick learning and interest in the intersection of information security, people, and the law.Maintain a strong understanding of the bridge between security and research and pay close attention to detail.Partner with key internal campus stakeholders on processes and controls, including the Office of the Vice Provost for Research, University Libraries, and researc
