Information Security Analyst, Center for Cybersecurity Research

Indiana University Bloomington; Bloomington (IN); On-site; USD 68,000 - 77,000; Full time

Benefits offered by this job

Comprehensive medical and dental care

Health savings account with IU

Tuition subsidy for employees and 가족

Generous paid time off

Retirement plan options

Life insurance and disability coverage

Employee assistance program

Job summary

The Information Security Analyst at Indiana University Bloomington joins the SecureMyResearch team to support researchers with cybersecurity and compliance needs across diverse projects. You translate technical, policy, contractual, and regulatory requirements into practical safeguards that protect research productivity while reducing risk.

Working closely with researchers and security engineers, you develop secure research workflows, guidance, and documentation, deliver training, and help

Qualifications

• Bachelor's degree in computer science or related field.
• At least 2 years of information security or related experience.
• Proficient communication and high professionalism.

Responsibilities

• Performs ongoing experienced analysis and monitoring of technology environments to identify security exposures and potential threats.
• Collaborates with researchers and security engineers to translate requirements into secure workflows.
• Develops cybersecurity guidance across the research lifecycle and maintains documentation.
• Creates training materials and conducts outreach to raise awareness of research cybersecurity.
• Maintains CACR's SecureMyResearch Cookbook content and related resources.

Skills

Proficient communication

Time management

Attention to detail

Professionalism

Flexibility

High accuracy

Windows OS

Unix/Linux

Cybersecurity concepts

Research & analysis

Education

Bachelor's degree in computer science or related field

Job description

CENTER FOR CYBERSECURITY RES (BL-CACR-IUBLA)
The Center for Applied Cybersecurity Research (CACR) is an Indiana University (IU) Bloomington Campus Research Center. CACR's mission is to provide people with the knowledge and skills they need to manage cybersecurity risks in complex, challenging environments where standard cybersecurity practices do not suffice. We do so through a combination of thought leadership, applied research, training and education, operational services, and extensive interdisciplinary collaboration. With a multidisciplinary approach, the Center for Applied Cybersecurity Research (CACR) specializes in helping communities and organizations with practical cybersecurity. Learn more about CACR initiatives.
The Information Security Analyst serves as a member of the SecureMyResearch team. SecureMyResearch is a service that provides cybersecurity and compliance consulting, support, and resources to the Indiana University research community with the goal of accelerating research while reducing risk to IU's research mission. The analyst supports researchers in addressing cybersecurity and compliance needs within the varied and often complex context of academic research, where technologies, data, collaborations, and regulatory obligations differ substantially across projects.

Department-Specific Responsibilities

• Works closely with researchers and partners across the university.
• Helps translate technical, policy, contractual, and regulatory requirements into practical approaches that support both effective cybersecurity and research productivity.
• Contributes to the development of secure research workflows, guidance, and institutional solutions while helping reduce the administrative and technical burden placed on researchers.
• Works collaboratively across technical and nontechnical domains, has sound judgment, analytical problem-solving, and clear communication.
• Performs intake and triage of new cases, reviews and responds to cases in a timely manner.
• Engages with researchers and research teams to understand their research project, technical requirements, and stakeholder obligations. Identifies and recommends appropriate technical solutions, helps research teams develop appropriate cybersecurity documentation, and supports researchers and system owners through institutional approval processes.
• Provides continuing cybersecurity guidance throughout the research lifecycle.
• Supports the ongoing management of the Secure My Research Cookbook by researching solutions and creating practical how-to pages for common research cybersecurity and compliance needs.
• Reviews and updates existing content to ensure it remains accurate, current, and useful as technologies, services, and institutional requirements change.
• Develops and delivers presentations, educational resources, and outreach activities that increase awareness of research cybersecurity practices and SecureMyResearch services.
• Participates in departmental meetings and researcher-facing events. Incorporates current institutional requirements, cybersecurity practices, and participant feedback into training materials.
• Supports coordination within the Center for Applied Cybersecurity Research and the university by participating in center meetings, maintaining compliance with required university training, contributing to center communications, and supporting other CACR initiatives as needed; these activities maintain awareness of organizational priorities and contribute to the effective operation of the center.

General Responsibilities

• Performs ongoing experienced analysis and monitoring of technology environments to identify security exposures and potential threats.
• Assesses and determines level of risk in order to provide threat information, as well as to advise and/or recommend protections and solutions, to security leadership and department decision-makers.
• Documents information security analysis efforts.
• Researches and stays abreast of current higher education security environment and trends; stays up to date on security analysis and monitoring best practices, tools, and approaches.
• Creates best practices information bulletins to increase communication, awareness and training efforts for faculty, staff and student population.
• Works closely with security engineers to ensure exposures and risks are avoided and/or addressed.
• Contributes to incident response investigations and assists with disaster recovery and business continuity efforts.

Combinations of related education and experience may be considered. Education beyond the minimum required may be substituted for work experience. Work experience beyond the minimum required may be substituted for education.

Education

• Bachelor's degree (preferably in computer science or related field).

Work Experience

• 2 years of information security or related experience.

Required Skills

• Proficient communication skills.
• Maintains a high degree of professionalism.
• Demonstrates time management and priority setting skills.
• Demonstrates a high commitment to quality.
• Possesses flexibility to work in a fast-paced, dynamic environment.
• Seeks to acquire knowledge in area of specialty.
• Highly thorough and dependable.
• Demonstrates a high level of accuracy, even under pressure.
• Demonstrates in-depth knowledge of Microsoft Windows or Unix-like operating systems.
• Attention to detail in communicating technical issues and implementing solutions.
• Mental discipline in conducting lengthy investigations.

Preferred

• Knowledge of cybersecurity frameworks and assurance standards (e.g., NIST Risk Management Framework, ISO/IEC 27001, SOC 2) and legal, regulatory, and contractual requirements affecting research (e.g., HIPAA, the Common Rule, CMMC).

This role requires the ability to effectively communicate and to operate a computer and other standard office productivity equipment. The position involves sedentary work as well as periods of time moving around an office environment and the campus. The person in this role must be able to perform the essential functions with or without an accommodation.

This position is a grant funded with expected annual renewals. Renewals are contingent on the availability of grant funds.

Indiana University Bloomington

$68,200.00 - $77,000.00 annually

For full-time staff employees, Indiana University offers a wide array of benefits including:

• Comprehensive medical and dental insurance
• Health savings account with generous IU contributions
• Healthcare and dependent care flexible spending accounts
• Basic group life insurance paid by IU
• Voluntary supplemental life, long-term disability, critical illness, and supplemental accidental death & dismemberment insurance
• Base retirement plan with generous IU contributions, subject to vesting
• Voluntary supplemental retirement plan options
• Tuition subsidy for employees and family members taking IU courses
• 10 paid holidays plus a paid winter break each year
• Generous paid time off plans
• Paid leave for new parents and IU-sponsored volunteer events
• Employee assistance program (EAP)

Learn more about our benefits by reviewing the IU Benefit Programs Brochure.

Career Level: Career

FLSA: Exempt

Job Function: Information Technology

Job Family: IT Security & Privacy

This posting is scheduled to close at 11:59 pm EST on the advertised Close Date. This posting may be closed at any time at the discretion of the University, but will remain open for a minimum of 5 business days. To guarantee full consideration, please submit your application within 5 business days of the Posted Date.

Indiana University is an equal opportunity employer and provider of ADA services and prohibits discrimination in hiring. See Indiana University Notice of Non-Discrimination here which includes contact information.

The Annual Security and Fire Safety Report, containing policy statements, crime and fire statistics for all Indiana University campuses, is available online. You may also request a physical copy by emailing IU Public Safety at [e-mail] or by visiting IUPD.

Request Support

Telephone: [phone]