CMMC Security & Compliance Analyst (Research)

University of Hawaii system; Honolulu (HI); On-site; USD 110,000 - 150,000; Full time

Job summary

University of Hawai'i is seeking a Security Admin/CMMC Research Analyst to oversee and maintain the university's information security, risk management, and compliance program. The role focuses on CMMC, NIST controls, SSP/POAM development, and collaboration with researchers and federal auditors.

The ideal candidate will interpret security requirements in grants, design frameworks for SREs, educate staff, and coordinate with external assessors to ensure regulatory compliance and data protection

Qualifications

• Bachelor’s degree in Computer Science or Information Security with 5 years of IT security experience.
• Knowledge of NIST 800-171 and NIST 800-53, SSPs and POAMs.
• Strong written and verbal communication and reporting skills.
• Ability to travel out-of-state and work variable hours.

Responsibilities

• Oversees and maintains UH information security, risk management, and compliance program.
• Designs and oversees security frameworks for federally funded research satisfying CMMC/NIST.
• Interprets security requirements for grants during pre-award phase.
• Develops SSPs and POAMs for research projects; maps controls to CMMC levels.
• Liaises with C3PAOs and federal auditors.
• Educates staff on security regulations and data handling.
• Creates online security education materials for researchers handling CUI.

Skills

Information security

NIST 800-171

CMMC

Risk assessment

Regulatory compliance

Training staff

Education

Bachelor's degree in Computer Science or Information Security

Tools

SPRS

NIST 800-53

FIPS encryption

MFA

Job description

University of Hawai'i is seeking a Security Admin/CMMC Research Analyst to oversee and maintain the university's information security, risk management, and compliance program. The role focuses on CMMC, NIST controls, SSP/POAM development, and collaboration with researchers and federal auditors.

The ideal candidate will interpret security requirements in grants, design frameworks for SREs, educate staff, and coordinate with external assessors to ensure regulatory compliance and data protection