Information Security Analyst for Research

University of North Carolina at Chapel Hill; Chapel Hill (NC); Presencial; USD 100.000 - 120.000; Jornada completa

Descripción de la vacante

The University of North Carolina at Chapel Hill is hiring an Information Security Analyst for Research. This role serves as the primary information security expert for Sheps DATA+ within the Cecil G. Sheps Center for Health Services Research.

You will work with system and development teams to ensure applications and systems meet university, state, federal, and contractual security and privacy requirements. Responsibilities include security planning, testing, monitoring, and reporting, and

Formación

• Master's degree and 1–2 years of experience in information security.
• Bachelor's degree and 2–4 years of experience in information security.
• Preferred CISSP, CISA, CISM, or Security+ certifications.

Responsabilidades

• Design and operate systems and applications to meet security and privacy requirements.
• Align architectures, designs and workflows with applicable compliance frameworks and coordinate with institutional offices.
• Conduct system security planning, testing, monitoring, assessment and reporting for Sheps systems.
• Interpret and apply information security policies, standards and controls in complex environments.
• Communicate security requirements clearly to technical and non-technical audiences and coordinate documentation across multiple systems.

Conocimientos

Information security

Communication

Risk assessment

Security testing

Educación

Master's degree

Bachelor's degree

Descripción del empleo

University of North Carolina at Chapel Hill is hiring an Information Security Analyst for Research. The role serves as the primary information security expert for Sheps DATA+, the data and technology team at the Cecil G. Sheps Center for Health Services Research. The analyst works with system and development teams to make sure applications and systems meet university, state, federal, and contractual security and privacy requirements.

Highlights

• Support system and development teams in designing and operating systems and applications that meet security and privacy requirements.
• Align system architectures, application designs, and operational workflows with applicable compliance frameworks, and involve the right institutional offices.
• Carry out system security planning, testing, monitoring, assessment, and reporting for Sheps systems.
• Interpret and apply information security policies, standards, and controls in complex technical environments.
• Working knowledge of security and privacy frameworks such as HIPAA, NIST, ISO 27001/27002, and SOC 2, plus experience with security planning, risk assessment, vulnerability management, or security testing.
• Communicate security requirements clearly to both technical and non-technical audiences, and coordinate documentation and reviews across multiple systems.
• Master's degree and 1 to 2 years of experience, or a bachelor's degree and 2 to 4 years of experience, or an equivalent combination.
• Preferred experience with regulated or sensitive data in research, academic, health care, or public-sector settings, and certifications such as CISSP, CISA, CISM, or Security+.
• Hiring range of $100,000 to $120,000 for a full-time permanent position.