Research Data Security and Compliance Analyst

Job Description

This position is located within the Office of Research Compliance's Research Information Security unit. The Research Data Security Analyst provides programmatic leadership and technical expertise to secure research data across the University of Maine, contributing to the management of the lifecycle of the research data security program to enable and protect research computing activities within academic units, Research Centers, and Institutes. Working in conjunction with the Office of Research Compliance, the Information Security Office, and UMS:IT, this role oversees the development, implementation, and continuous improvement of research-specific data security procedures, guidance, and infrastructure. Acting as a crucial liaison between research units and IT, the Analyst leverages existing tools to manage security initiatives, support the acquisition of IT infrastructure, and oversees the creation and updating of University of Maine System policies. Furthermore, this position leads the evaluation of data security requirements in research contracts and technology reviews, recommending compliant solutions to protect sensitive data, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), Covered Research Information, Protected Health Information (PHI), and Personally Identifiable Information (PII). Ultimately, the Analyst ensures comprehensive data stewardship by managing the review and compliance tracking of Data Use Agreements (DUAs) and their associated Data Security Plans, serving as a program lead in developing best practices for research data management. Typical hiring range for this position is $75,000 to $95,000 commensurate with qualifications and experience.

Please review the Research Data Security and Compliance Analyst job description for more information.

Qualifications:
Required:

• U.S. person status is required for this position to comply with the Arms Export Control and Export Administration Act. U.S. persons are U.S. citizens, legal permanent residents as defined by 8 U.S.C. 1101(a)(20) or protected individuals as defined by 8 U.S.C. 1324b(a)(3).
• Bachelor's degree in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• At least three (3) years of relevant work experience.
• Demonstrated professional experience in export controls and/or research security with knowledge of relevant rules and regulations.
• Ability to complete Information Security Certification such as a CISSP, CISA, CISM or GIAC within three years of hire.

Preferred:

• Master's degree or PhD in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• Five (5) or more years of relevant work experience.
• Demonstrated ability to work autonomously but also within a team environment.
• Demonstrated excellent customer service and communication skills.
• Highly motivated, self-starter with ability to multi-task.
• Experience designing and managing a cybersecurity risk management program based on NIST standards and frameworks.
• Familiarity with NSPM-33 and CHIPS and Science Act of 2022 research security requirements.
• Knowledge of NIST 800 series security requirements and CMMC program requirements.
• Experience facilitating an information system security program within a complex organization.
• Demonstrated working experience at an accredited institution of higher education.
• Demonstrated working experience developing policies and procedures such as detailed documentation and training resources for customers.
• Program or project management experience and/or certification (e.g. PMP, PMI).
• Prior supervisory experience.
• Familiarity with HIPAA Security Rule and Privacy Rule guidelines.
• Eligible for, and able to obtain and maintain at least Secret level security clearance as required to perform assigned duties.
• Information Security Certification such as a CISSP, CISA, CISM or GIAC.

Other Information:

To be considered for this position you will need to "Apply" and upload the documentation listed below:

1.) a cover letter which describes your experience, interests, and suitability for the position
2.) a resume/curriculum vitae

Candidates selected to proceed to the final stages of the search process will be requested to provide a list of names and contact information for references.

Incomplete application materials cannot be considered. Materials received after the initial review date will be reviewed at the discretion of the University.

For full consideration, materials must be submitted by 4:30 p.m. EST on October 16, 2026.

The successful applicant is subject to appropriate background screening.