Research Security Compliance Specialist III

Rochester-Institute-of-Technology; City of Rochester (NY); On-site; USD 73,000 - 116,000; Full time

Job summary

Rochester Institute of Technology is seeking a Research Security and Compliance Specialist to lead the compliance component of the CMMC program for sponsored research projects. The role partners with PI's, sponsors, and campus stakeholders to translate sponsor and regulatory requirements into practical controls, training, and documentation.

The ideal candidate will have a master's degree and at least five years of relevant experience, with strong knowledge of federal cybersecurity and

Qualifications

• Master's degree in a related field.
• 5+ years of relevant experience in research security/compliance.
• Knowledge of federal cybersecurity and controlled-research-data requirements.

Responsibilities

• Oversee the compliance component of RIT's CMMC program for sponsored research cybersecurity.
• Assist cross-functional teams with policy creation, implementation, and audits.
• Provide training, guidance, and consultations to the research community.
• Review data-use agreements, contracts, and project initiation for compliance obligations.
• Document processes and attestations for sponsored projects and maintain records.

Skills

Regulatory knowledge

Cybersecurity regs

Network security

Risk assessment

Stakeholder comms

Legal writing

Regulatory relations

Education

Master's degree

Job description

Position HighlightsServe as RIT’s lead resource for research security and sponsored research compliance, supporting federally funded and industry-sponsored research projects.Coordinate compliance efforts related to CMMC 2.0, FCI, CUI, HIPAA, NSPM-33, GDPR, and other research security and data protection requirements.Partner with principal investigators, sponsors, and campus stakeholders to assess compliance needs, develop project-specific security documentation, support audits and assessments, and ensure sponsored research activities meet regulatory and sponsor expectations.Help translate complex sponsor and regulatory requirements into practical processes, policies, training, and institutional controls that enable research success while maintaining compliance.Promote a culture of ethics, accountability, and compliance across the university's research enterprise.This position is fully on campus and is not eligible for remote work. To receive full consideration, applicants must submit both a resume and cover letter with their application.Sponsored Research Services, Office of the Vice President for ResearchSponsored Research Services (SRS) supports RIT’s research community by providing guidance and oversight throughout the sponsored research lifecycle. Working closely with faculty, research staff, and campus partners, SRS helps ensure that research activities meet sponsor requirements and applicable regulations while advancing the university’s research mission.The Research Security and Compliance Specialist plays a key role in strengthening RIT’s research security and compliance framework. This position collaborates with stakeholders across the university, including the Information Security Office, Research Computing, Information & Technology Services, Institute Audit, and academic units, to support secure research practices, data protection, and regulatory compliance. Through partnership, education, and process development, the team helps researchers navigate evolving security requirements and successfully manage sponsored research projects.Essential Duties & ResponsibilitiesOversees compliance component of RIT's CMMC program for sponsored research cybersecurity. Assists cross-functional team with policy creation, implementation, operations, program roadmap, requirements, tracking of compliance gaps, and preparation for self-assessment and third-party assessment. Provides final compliance sign-off on processes needed to comply with federal and sponsor standards and other information research security standardsEnsures projects requiring protected research data are reviewed and supported before work begins. Assists with identifying cybersecurity and controlled-data obligations during proposal development, contract review, award set up, data use agreement review and project initiation.Provides gap analysis and creates individualized information research security control plans for projects as necessary. Provides compliance certifications to sponsors. Documents processes and records demonstrating RIT reviews, attestations, and required training occurred on every sponsored projectProvides guidance, training, and consultation to research community, including developing and delivering trainingAdvises research community on information research security regulations, changes, and compliance processesOther duties as assignedKnowledge, Skills, & AbilitiesKnowledge of local, state, and federal laws and regulations that govern information research compliance standardsKnowledge of federal cybersecurity and controlled-research-data requirements impacting sponsored researchUnderstanding of network security, firewalls, encryption, cloud computing standards, and workstation securitySkill in risk assessment and mitigation in the management of research compliance strategiesSkill in effective communication and collaboration with internal and external stakeholders regarding complex or technical topicsSkill in technical, legal, and compliance writingAbility to establish and maintain relationships with state and federal regulatory agenciesMinimum Education & ExperienceMaster's degree in related field5 years of relevant experienceAn equivalent combination of education and experience may be consideredJob Level OverviewSpecialized Contributor Level 3 - A senior-level role requiring broad understanding of the profession or field of work. Independently leads diverse and often complex assignments, projects, or programs. May act as a mentor and guide less experienced staff.FLSA CategoryExemptWork LocationOn CampusCompensation$72,500.00 - $116,000.00 AnnualApplication MaterialsWhen you are ready to complete an application for this position please be prepared to submit the below requested information. This will be required to ensure your application is processed in a timely manner.Cover Letter, Curriculum Vitae or ResumeCandidates must be eligible to work in the United States.Additional DetailsIn compliance with NYS's Pay Transparency Act, the salary range for this position is listed above. Rochester Institute of Technology considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as, market and organizational considerations when extending an offer. The hiring process for this position may require a criminal background check and/or motor vehicle records check. Any verbal or written offer made is contingent on satisfactory results, as determined by Human Resources. RIT provides equal opportunity to all qualified individuals and does not discriminate on the basis of race, color, creed, age, marital status, sex, gender, religion, sexual orientation, gender identity, gender expression, national origin, veteran status or disability in its hiring, admissions, educational programs and activities. RIT provides reasonable accommodations to applicants with disabilities under the Rehabilitation Act, the Americans with Disabilities Act, the New York Human Rights Law, or similar applicable law.If you need reasonable accommodation for any part of the application and hiring process, please contact the Human Resources office at 585-475-2424 or email your request to [e-mail] . Determinations on requests for reasonable accommodation will be made on a case-by-case basis.