Lead Research Security & Compliance Specialist (On Campus)

Rochester Institute of Technology; United States; On-site; USD 73,000 - 116,000; Full time

Job summary

Rochester Institute of Technology is seeking a Research Security and Compliance Specialist to be the lead resource for research security and sponsored research compliance. The role coordinates efforts related to CMMC 2.0, FCI, CUI, HIPAA, GDPR, and other requirements, translating complex sponsor and regulatory needs into practical policies and processes on campus.

You will partner with principal investigators, sponsors, and campus stakeholders to assess compliance needs, support audits and

Qualifications

• Knowledge of local, state, and federal laws and regulations that govern information research compliance standards.
• Knowledge of federal cybersecurity and controlled-research-data requirements impacting sponsored research.
• Understanding of network security, firewalls, encryption, cloud computing standards, and workstation security.
• Skill in risk assessment and mitigation in the management of research compliance strategies.
• Skill in effective communication and collaboration with internal and external stakeholders regarding complex or technical topics.
• Skill in technical, legal, and compliance writing.
• Ability to establish and maintain relationships with state and federal regulatory agencies.

Responsibilities

• Oversees compliance component of RIT's CMMC program for sponsored research cybersecurity.
• Assists with policy creation, implementation, operations, program roadmap, requirements, tracking of compliance gaps, and preparation for self-assessment and third-party assessment.
• Provides final compliance sign-off on processes needed to comply with federal and sponsor standards and other information research security standards.
• Ensures projects requiring protected research data are reviewed and supported before work begins.
• Assists with identifying cybersecurity and controlled-data obligations during proposal development, contract review, award setup, data use agreement review and project initiation.
• Provides gap analysis and creates individualized information research security control plans for projects as necessary.
• Provides compliance certifications to sponsors.
• Documents processes and records demonstrating RIT reviews, attestations, and required training occurred on every sponsored project.
• Provides guidance, training, and consultation to research community, including developing and delivering training.
• Advises research community on information research security regulations, changes, and compliance processes.
• Other duties as assigned.

Skills

Regulatory knowledge

Cybersecurity

Stakeholder collaboration

Policy writing

Risk assessment

Job description

Rochester Institute of Technology is seeking a Research Security and Compliance Specialist to be the lead resource for research security and sponsored research compliance. The role coordinates efforts related to CMMC 2.0, FCI, CUI, HIPAA, GDPR, and other requirements, translating complex sponsor and regulatory needs into practical policies and processes on campus.

You will partner with principal investigators, sponsors, and campus stakeholders to assess compliance needs, support audits and