Senior Research IT Security & Compliance Strategist

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Free transit pass

Family concierge

Fitness center access

Tuition benefits

Paid time off

Job summary

Carnegie Mellon University in Pittsburgh, PA, is seeking a Senior Research IT Security Risk & Compliance Analyst to assess, document, and implement controls for university research. This role manages control documentation, advises on best practices, and supports information security for regulated research across IT domains.

Responsibilities include auditing systems, driving risk items to closure, leading cross‑stakeholder compliance projects, and developing security policies for the ISO.

Qualifications

• Bachelor’s degree required.
• 5–7 years of experience working with researchers and regulated data.
• CMMC CCP certification or ability to obtain within 3 months of employment.

Responsibilities

• Audit Research IT systems and ensure established controls are followed.
• Identify security findings and drive risk items to closure with stakeholders.
• Lead compliance projects with multiple stakeholders within deadlines.
• Develop policies, guidance, and procedures related to research information security.
• Interface with researchers to determine information security requirements and environments.
• Assist with security incident response for research IT systems.

Skills

Regulated data experience

Risk assessments familiarity

Education

Bachelor’s Degree

Job description

Carnegie Mellon University in Pittsburgh, PA, is seeking a Senior Research IT Security Risk & Compliance Analyst to assess, document, and implement controls for university research. This role manages control documentation, advises on best practices, and supports information security for regulated research across IT domains.

Responsibilities include auditing systems, driving risk items to closure, leading cross‑stakeholder compliance projects, and developing security policies for the ISO.