Research Information Security Analyst

University-of-North-Carolina-At-Chapel-Hil; Chapel Hill (NC); On-site; USD 85,000 - 110,000; Full time

Job summary

University of North Carolina at Chapel Hill seeks an Information Security Analyst for Research to serve as the primary information security expert for Sheps DATA+, supporting system and development teams in secure design and operation that meets university, state, federal, and contractual requirements.

The role collaborates with technical staff to align system architectures and workflows with applicable compliance frameworks and to fulfill planning, testing, monitoring, and reporting obligations

Qualifications

• Demonstrated experience interpreting information security policies and controls.
• Experience with security frameworks such as HIPAA, NIST, ISO 27001/27002, SOC 2.
• Ability to communicate security requirements clearly to technical and non-technical audiences.
• Strong organizational skills coordinating reviews across multiple systems.

Responsibilities

• Serve as the primary information security expert for Sheps DATA+, supporting systems and apps.
• Collaborate with technical staff to ensure architectures meet security/privacy requirements.
• Fulfill planning, testing, monitoring, assessment, and reporting obligations.
• Engage institutional offices to ensure alignment with compliance frameworks.

Skills

Policy interpretation

Security frameworks

Security communications

Documentation coordination

Risk assessment

Education

Master’s degree

Bachelor’s degree

Tools

Cloud platforms

Vulnerability scanning tools

Job description

University of North Carolina at Chapel Hill seeks an Information Security Analyst for Research to serve as the primary information security expert for Sheps DATA+, supporting system and development teams in secure design and operation that meets university, state, federal, and contractual requirements.

The role collaborates with technical staff to align system architectures and workflows with applicable compliance frameworks and to fulfill planning, testing, monitoring, and reporting obligations