Information Security Analyst for Research

The Information Security Analyst for Research serves as the primary information security expert for Sheps( DATA)+, supporting system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements., The Information Security Analyst works alongside technical staff to ensure that system architectures, application designs, and operational workflows are aligned with applicable compliance frameworks while also ensuring that the appropriate institutional offices are engaged. They are tasked with fulfilling the system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

Master’s and 1-2 years’ experience; or Bachelors and 2-4 years’ experience; or will accept a combination of related education and experience in substitution., * Must have demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments.

• Must have working knowledge of relevant security and privacy frameworks, such as HIPAA, NIST, ISO 27001/27002, SOC 2, or comparable standards.
• Must have experience supporting security planning, risk assessment, vulnerability management, or security testing activities.
• Must have the ability to communicate security requirements clearly to technical and non-technical audiences.

• Must have strong organizational skills and the ability to coordinate documentation, reviews, and follow-up activities across multiple systems or stakeholders. Preferred Qualifications, Competencies, and Experience

• Experience in a research, academic, health care, or public-sector environment involving regulated or sensitive data.
• Familiarity with University information security processes, data use agreements, business associate agreements, or third-party security assessments.
• Experience working with cloud-hosted systems, secure research computing environments, or application development teams.
• Ability to develop templates, guidance materials, or repeatable processes that improve security planning and compliance operations.
• Relevant security, privacy, audit, or risk management certification, such as CISSP, CISA, CISM, Security+, or comparable credential.

One of the best college towns and best places to live in the United States, Chapel Hill has diverse social, cultural, recreation and professional opportunities that span the campus and community. University employees can choose from a wide range of professional training opportunities for career growth, skill development and lifelong learning and enjoy exclusive perks for numerous retail, restaurant and performing arts discounts, savings on local child care centers and special rates on select campus events. UNC-Chapel Hill offers full-time employees a comprehensive benefits package, paid leave, and a variety of health, life and retirement plans and additional programs that support a healthy work/life balance. Primary Purpose of Organizational Unit The Cecil G. Sheps Center for Health Services Research seeks to improve the health of individuals, families, and populations by understanding the problems, issues, and alternatives in the design and delivery of health care services. This is accomplished through an interdisciplinary program of research, consultation, technical assistance, and training that focuses on timely and policy-relevant questions concerning the accessibility, adequacy, organization, cost, and effectiveness of health care services, and the dissemination of this information to policymakers and the general public.