Information Security Analyst for Research

University of North Carolina - Chapel Hill; Elkins Hills (NC); On-site; USD 100,000 - 120,000; Full time

Job summary

The Cecil G. Sheps Center for Health Services Research at University of North Carolina at Chapel Hill seeks an Information Security Analyst for Research to serve as the primary information security expert for Sheps(DATA)+, supporting system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements.

The role focuses on security planning, testing, monitoring, and reporting obligations across

Qualifications

• Must have demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments.
• Must have working knowledge of security and privacy frameworks such as HIPAA, NIST, ISO 27001/27002, SOC 2 or comparable standards.
• Experience supporting security planning, risk assessment, vulnerability management, or security testing activities.
• Ability to communicate security requirements clearly to technical and non-technical audiences.
• Strong organizational skills and the ability to coordinate documentation across multiple systems or stakeholders.

Responsibilities

• Serve as the primary information security expert for Sheps(DATA)+ and support system and development teams in designing and operating compliant systems and applications.
• Ensure system architectures, application designs, and operational workflows align with applicable frameworks while engaging the appropriate institutional offices.
• Fulfill system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

Skills

Policy interpretation

Security frameworks

Risk assessment

Security testing

Communication skills

Documentation coordination

Education

Master's degree + 1-2 years experience

Bachelor's degree + 2-4 years experience

Tools

CISSP

CISA

CISM

Security+

Job description

Posting Information

Department Sheps Ctr for Hlth Serv Res-633100

Career Area Research Professionals

Posting Open Date 10/29/2026

Application Deadline 11/12/2026

Open Until Filled No

Position Type Permanent Staff (EHRA NF)

Working Title Information Security Analyst for Research

Appointment Type EHRA Non-Faculty

Position Number 20078884

Vacancy ID NF0010149

Full Time/Part Time Full-Time Permanent

FTE 1

Hours per week 40

Position Location North Carolina, US

Hiring Range $100,000 - $120,000

Proposed Start Date 12/07/2026

Position Information

A global higher education leader in innovative teaching, research and public service, the University of North Carolina at Chapel Hill consistently ranks as one of the nation's top public universities. Known for its beautiful campus, world-class medical care, commitment to the arts and top athletic programs, Carolina is an ideal place to teach, work and learn.

One of the best college towns and best places to live in the United States, Chapel Hill has diverse social, cultural, recreation and professional opportunities that span the campus and community.

University employees can choose from a wide range of professional training opportunities for career growth, skill development and lifelong learning and enjoy exclusive perks for numerous retail, restaurant and performing arts discounts, savings on local child care centers and special rates on select campus events. UNC-Chapel Hill offers full-time employees a comprehensive benefits package, paid leave, and a variety of health, life and retirement plans and additional programs that support a healthy work/life balance.

The Cecil G. Sheps Center for Health Services Research seeks to improve the health of individuals, families, and populations by understanding the problems, issues, and alternatives in the design and delivery of health care services. This is accomplished through an interdisciplinary program of research, consultation, technical assistance, and training that focuses on timely and policy-relevant questions concerning the accessibility, adequacy, organization, cost, and effectiveness of health care services, and the dissemination of this information to policymakers and the general public.

The Information Security Analyst for Research serves as the primary information security expert for Sheps(DATA)+, supporting system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements.
The Information Security Analyst works alongside technical staff to ensure that system architectures, application designs, and operational workflows are aligned with applicable compliance frameworks while also ensuring that the appropriate institutional offices are engaged. They are tasked with fulfilling the system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

Minimum Education and Experience Requirements: Master's and 1-2 years' experience; or Bachelors and 2-4 years' experience; or will accept a combination of related education and experience in substitution.

Required Qualifications, Competencies, and Experience

• Must have demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments.
• Must have working knowledge of relevant security and privacy frameworks, such as HIPAA, NIST, ISO 27001/27002, SOC 2, or comparable standards.
• Must have experience supporting security planning, risk assessment, vulnerability management, or security testing activities.
• Must have the ability to communicate security requirements clearly to technical and non-technical audiences.
• Must have strong organizational skills and the ability to coordinate documentation, reviews, and follow-up activities across multiple systems or stakeholders.

Preferred Qualifications, Competencies, and Experience

• Experience in a research, academic, health care, or public-sector environment involving regulated or sensitive data.
• Familiarity with University information security processes, data use agreements, business associate agreements, or third-party security assessments.
• Experience working with cloud-hosted systems, secure research computing environments, or application development teams.
• Ability to develop templates, guidance materials, or repeatable processes that improve security planning and compliance operations.
• Relevant security, privacy, audit, or risk management certification, such as CISSP, CISA, CISM, Security+, or comparable credential.

Campus Security Authority Responsibilities Not Applicable.

Posting Contact Information

Department Contact Name and Title Diana M. deProphetis, HR Specialist

Department Contact Telephone or Email [e-mail]

Office of Human Resources Contact Information If you experience any problems accessing the system or have questions about the application process, please contact the Office of Human Resources at [phone] or send an email to [e-mail] Please note: The Office of Human Resources will not be able to provide specific updates regarding position or application status.

Equal Opportunity Employer Statement

The University is an equal opportunity employer and welcomes all to apply without regard to age, color, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, or sexual orientation. We encourage all qualified applicants to apply, including protected veterans and individuals with disabilities.

Quick Link

https://unc.peopleadmin.com/postings/327847