Research Information Security Compliance Program Manager

• Oversee and coordinate research IT compliance across the university
• Manage a research security program
• Ensure all research IT environments—including those handling Controlled Unclassified Information (CUI), compliance with CMMC, SIPRNet/Classified Cloud/MUSA, HIPAA, and NIH data—meet federal, sponsor, and institutional standards
• Lead efforts to manage regulatory requirements such as NSPM-33, the CHIPS and Science Act, and NIH data security plans
• Work collaboratively with research, compliance, and IT teams to maintain a secure and compliant research IT landscape
• Inform the broader University Information Security Office Governance, Risk, and Compliance (GRC) program and risk register

• Considerable knowledge of IT compliance or research IT program management, preferably in higher education or regulated research environments
• Demonstrated expertise with federal and sponsor research compliance frameworks, including but not limited to NSPM-33, CHIPS and Science Act, CMMC (Levels 1 & 2), NIST SP 800-171/53, HIPAA, and NIH data security requirements
• Strong understanding of CUI, classified/unclassified hybrid environments, and the management of regulated data within research IT systems
• Proven ability to collaborate effectively across departments, including research administration, IT, compliance, legal, and academic units
• Experience reviewing and managing Data Use Agreements (DUAs), Data Security Plans (DSPs), and related documentation
• Familiarity with SIPRNet, classified cloud, MUSA, and requirements for secure operation and compliance
• Excellent organizational, communication, and documentation skills, with a focus on regulatory evidence, risk tracking, and compliance reporting
• Ability to manage multiple projects and competing priorities in a complex, regulated environment
• Significant experience in research IT, compliance management, or information security within an academic or research-intensive environment is strongly preferred
• Understanding of enclave architectures, secure research computing, and sponsor-mandated cybersecurity reporting
• Experience with university research administration processes and sponsor compliance audits
• Certifications such as CISSP, GCCC, GCED, or other industry certifications
• be a U.S. Citizen
• have or obtain a Secret security clearance

Relevant certifications such as CISSP, CISM, CISA, or equivalent preferred but not required