RESEARCHING COMPUTING SECURITY & COMPLIANCE ENG-ENT

University of Alabama at Birmingham; Birmingham (AL); On-site; USD 94,000 - 153,000; Full time

Job summary

University of Alabama at Birmingham is seeking an experienced security/compliance lead for Research Computing. The role plans, designs, deploys, and maintains secure HPC and cloud environments to enable compliant research operations.

The ideal candidate has a Bachelor's degree and 5 years of related work, with familiarity in NIST, HIPAA, FERPA, and CMMC. Strong communication and cross-team collaboration are essential for success in this role.

Qualifications

• Bachelor's degree in Computer science, Information systems, Cybersecurity, or related field.
• Five years of related experience required.
• Security certifications such as CISSP, CISM, or CISA are a plus.
• Experience with HPC environments and Linux.
• Knowledge of NIST, HIPAA, FISMA, CMMC regulations.
• Strong written and verbal communication.

Responsibilities

• Develop security control requirements for research computing environments (HPC, cloud, hybrid).
• Engineer and implement protocols and controls to ensure a secure, compliant environment.
• Monitor the effectiveness of the research compliance program and recommend improvements.
• Ensure adherence to regulatory requirements (NIST, HIPAA, FISMA, CMMC).
• Provide guidance to university stakeholders on compliance practices for safe workflows.
• Serve as a point of contact for security controls with Enterprise Information Security Office.
• May participate in incident response or compliance investigations as SME.

Skills

Security controls

Compliance programs

Regulatory requirements

HIPAA/FERPA

NIST/CMMC/FISMA

Incident response

Linux security

Written communication

Cross-team collaboration

Education

Bachelor's degree in Computer science, Information systems, Cybersecurity, or related field

Tools

Linux-based environments

Security tooling

Job description

FOR USE BY UAB IT ONLY: Independently oversees the research compliance program for Research Computing. Plans, designs, deploys, monitors and maintains secure environments for research data. Implements security and compliance protocols and controls into high performance computing (HPC) cluster and cloud environments to ensure researchers can operate in a secure, compliant environment. Ensures compliance with regulatory and university requirements. Partners with and serves as a liaison to other university stakeholders, including Enterprise Information Security, Data Privacy & Governance, and researchers across the enterprise. May assist in the enforcement of policies or procedures related to data security. This position will commit to fostering an environment of heightened security following Information Technology Security Policies and participating in security training, such as Health Insurance Portability & Accountability Act (HIPAA) and Family Education Rights and Privacy Act (FERPA) on an annual basis.

Key Duties Responsibilities:

• Works with research computing team to develop security control requirements for research computing environments, including HPC, cloud and hybrid infrastructures.
• Engineers and implement protocols and controls into research systems, ensuring a secure and compliant environment.
• Monitors the effectiveness of the research compliance program and makes recommendations for improvements when necessary.
• Ensures adherence to regulatory requirements such as, but not limited to, NIST, HIPAA, FISMA, CMMC, and sponsor mandated requirements. Remains up to date with regulations and policies related to research data, both internal and external, federal regulations.
• Provides guidance and support to university stakeholders on compliance practices to enable safe, compliant, and efficient workflows.
• Serves as a point of contact for security controls and compliance related inquiries with the Enterprise Information Security Office. May participate in incident response or compliance investigations as the Research Computing system subject-matter expert.
• Perform other duties as assigned

(Annual Salary: $94,375 - $153,355)

Bachelor's degree in Computer science, Information systems, Cybersecurity, or related field and five (5) years of related experience required. Work experience may NOT substitute for education requirement. Security certification such as CISSP, CISM, or CISA is a plus.

Advanced knowledge and/or experience in high performance computing environments (on prem and cloud), research computing, research security, or research compliance. Advanced knowledge of working in and/or securing Linux-based environments. Advanced knowledge of NIST, CMMC, and federal CUI handling regulations. Knowledge or experience in information security, including writing security plans, managing POAMs, and incident response. Experience in a higher education environment is a plus. Ability to or familiarity with implementing security controls and protocols. Strong written and verbal communication skills. Ability to work across multidisciplinary teams to achieve results. Security certification such as CISSP, CISM, or CISA is a plus.

UAB is an Equal Employment/Equal Educational Opportunity Institution dedicated to providing equal opportunities and equal access to all individuals regardless of race, color, religion, ethnic or national origin, sex (including pregnancy), genetic information, age, disability, and veteran's status. As required by Title IX, UAB prohibits sex discrimination in any education program or activity that it operates. Individuals may report concerns or questions to UAB's Assistant Vice President and Senior Title IX Coordinator. The Title IX notice of nondiscrimination is located at uab.edu/titleix.

Primary Location

University

Organization

190800000 Research Computing

Employee Status

Regular

Shift

Day/1st Shift

Work Arrangement (final schedule to be determined by the department/hiring manager)

Onsite