Research Data Security and Compliance Analyst

Research Data Security and Compliance Analyst

This position is located within the Office of Research Compliance’s Research Information Security unit. The Research Data Security Analyst provides programmatic leadership and technical expertise to secure research data across the University of Maine, contributing to the management of the lifecycle of the research data security program to enable and protect research computing activities within academic units, Research Centers, and Institutes. Working in conjunction with the Office of Research Compliance, the Information Security Office, and UMS:IT, this role oversees the development, implementation, and continuous improvement of research-specific data security procedures, guidance, and infrastructure. Acting as a crucial liaison between research units and IT, the Analyst leverages existing tools to manage security initiatives, support the acquisition of IT infrastructure, and oversees the creation and updating of University of Maine System policies. Furthermore, this position leads the evaluation of data security requirements in research contracts and technology reviews, recommending compliant solutions to protect sensitive data, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), Covered Research Information, Protected Health Information (PHI), and Personally Identifiable Information (PII). Ultimately, the Analyst ensures comprehensive data stewardship by managing the review and compliance tracking of Data Use Agreements (DUAs) and their associated Data Security Plans, serving as a program lead in developing best practices for research data management. Typical hiring range for this position is $75,000 to $95,000 commensurate with qualifications and experience.

Please review the Research Data Security and Compliance Analyst job description for more information.

About the University:

The University of Maine is a community of more than 11,900 undergraduate and graduate students, and 2,500 employees located on the Orono campus, the regional campus in Machias, and throughout the state. UMaine is a land, sea and space grant university, and maintains a leadership role as the University of Maine System's flagship institution. UMaine is the state's public research university and a Carnegie R1 top-tier research institution, dedicated to providing excellent teaching, research and service for Maine, the nation and the world. More information about UMaine is at umaine.edu.

The University of Maine offers a wide range of benefits for employees including, but not limited to, tuition benefits (employee and dependent), comprehensive insurance coverage including medical, dental, vision, life insurance, and short and long term disability as well as retirement plan options.

UMaine is located in beautiful Central Maine. Many employees report that a primary reason for choosing to come to UMaine is quality of life. Numerous cultural activities, excellent public schools, safe neighborhoods, high quality medical care, little traffic, and a reasonable cost of living make the greater Bangor area a wonderful place to live. Visit the Maine Office of Tourism to learn more about what the Bangor region has to offer.

Qualifications

Required:

• U.S. person status is required for this position to comply with the Arms Export Control and Export Administration Act. U.S. persons are U.S. citizens, legal permanent residents as defined by 8 U.S.C. 1101(a)(20) or protected individuals as defined by 8 U.S.C. 1324b(a)(3).
• Bachelor’s degree in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• At least three (3) years of relevant work experience.
• Demonstrated professional experience in export controls and/or research security with knowledge of relevant rules and regulations.
• Ability to complete Information Security Certification such as a CISSP, CISA, CISM or GIAC within three years of hire.

Preferred:

• Master’s degree or PhD in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• Five (5) or more years of relevant work experience.
• Demonstrated ability to work autonomously but also within a team environment.
• Demonstrated excellent customer service and communication skills.
• Highly motivated, self-starter with ability to multi-task.
• Experience designing and managing a cybersecurity risk management program based on NIST standards and frameworks.
• Familiarity with NSPM-33 and CHIPS and Science Act of 2022 research security requirements.
• Knowledge of NIST 800 series security requirements and CMMC program requirements.
• Experience facilitating an information system security program within a complex organization.
• Demonstrated working experience at an accredited institution of higher education.
• Demonstrated working experience developing policies and procedures such as detailed documentation and training resources for customers.
• Program or project management experience and/or certification (e.g. PMP, PMI).
• Prior supervisory experience.
• Familiarity with HIPAA Security Rule and Privacy Rule guidelines.
• Eligible for, and able to obtain and maintain at least Secret level security clearance as required to perform assigned duties.
• Information Security Certification such as a CISSP, CISA, CISM or GIAC.