CUI Compliance Lead – Research Security & CMMC

University of Oklahoma; Norman (OK); On-site; USD 120,000 - 180,000; Full time

Job summary

The University of Oklahoma is building an institutional CUI program to support its defense and federally sponsored research, pursuing CMMC Level 2 certification. We seek a hands-on security leader experienced with NIST SP 800-171 to drive that effort across OU’s Norman, Health, and Tulsa campuses.

You will develop compliance documentation, coordinate with OU IT for controls, and act as the primary liaison to researchers and administrators on CUI requirements and incident response.

Qualifications

• 5+ years in information security with direct implementation of NIST SP 800-171.
• Experience writing or maintaining an SSP and working with IT teams on technical control implementation.
• Ability to explain regulatory requirements clearly to researchers, administrators, and executives.
• Bachelor's degree in cybersecurity, information systems, or a related field, or equivalent experience.
• Willingness to travel and availability outside regular business hours.

Responsibilities

• Lead the development, implementation, and continuous improvement of OU's path to CMMC Level 2 certification, including readiness assessments, gap remediation, and third-party assessment preparation.
• Develop, maintain, and oversee SSP, POA&M, SPRS reporting, and related documentation in collaboration with OU IT.
• Review proposals and awards to identify CUI obligations and determine when projects must operate within the secure research enclave.
• Author and maintain policies, procedures, standards, and governance frameworks related to CUI and compliance.
• Serve as the primary point of contact for PIs, researchers, and administrators regarding CUI requirements, secure research environments, and incident reporting.

Job description

The University of Oklahoma is building an institutional CUI program to support its defense and federally sponsored research, pursuing CMMC Level 2 certification. We seek a hands-on security leader experienced with NIST SP 800-171 to drive that effort across OU’s Norman, Health, and Tulsa campuses.

You will develop compliance documentation, coordinate with OU IT for controls, and act as the primary liaison to researchers and administrators on CUI requirements and incident response.