Research Cybersecurity Analyst: Secure & Compliant Research

Cybersecurity Jobs; San Diego (CA); Hybrid; USD 81,000 - 118,000; Full time

Benefits offered by this job

15 paid holidays

CalPERS pension plan

Medical, dental, and vision benefits

Tuition fee waiver

FlexCash

Life and disability insurance

Legal and pet plans

Library access and campus events

Job summary

San Diego State University invites applications for a Research Cybersecurity Analyst to turn cybersecurity, contract, regulatory, and sponsor requirements into secure safeguards for research environments. You will translate complex obligations into practical controls and work with researchers, IT, and compliance teams to ensure compliant operations.

The role covers risk assessments, evidence collection (SSPs/POA&Ms), and readiness for sponsor inquiries or audits, with hybrid on-site/remote work

Qualifications

• Experience implementing or assessing NIST SP 800-171, CMMC, NIST SP 800-53, or similar frameworks.
• Experience securing Windows, Linux, cloud, or research computing environments.
• Ability to translate requirements into technical and procedural controls.

Responsibilities

• Review proposals, contracts, and data-use agreements for cybersecurity requirements.
• Perform risk, gap, and control readiness assessments with remediation options.
• Collaborate with researchers and compliance teams to implement requirements.
• Define scope of research environments and evidence for compliance.
• Develop and maintain SSPs and POA&Ms.
• Support sponsor inquiries and audits.

Skills

NIST SP 800-171

CMMC

NIST SP 800-53

SSPs/POA&Ms knowledge

Cloud/Windows/Linux security

Communication skills

Education

Bachelor's degree in related field

Job description

San Diego State University invites applications for a Research Cybersecurity Analyst to turn cybersecurity, contract, regulatory, and sponsor requirements into secure safeguards for research environments. You will translate complex obligations into practical controls and work with researchers, IT, and compliance teams to ensure compliant operations.

The role covers risk assessments, evidence collection (SSPs/POA&Ms), and readiness for sponsor inquiries or audits, with hybrid on-site/remote work