Salary: See Position Description
Location : UH Manoa, Honolulu, HI
Job Type: Full-Time Temporary
Job Number:
Department: Information Technology Services System
Division: Office of the VP for Information Technology and Chief Information Officer
Opening Date: 08/26/2026
Closing Date: 9/24/2026 11:59 PM Hawaii
Position Number:: 0096679T
Description
Title: Security Admin/CMMC Research Tech Analyst

Position Number: 0096679T

Hiring Unit: Information Technology Services, OVPIT & CIO

Location: UH System Offices, Manoa Campus

Date Posted: August 26, 2026

Closing Date: September 24, 2026

Band: B

Salary :

Full Time/Part Time: Full-time

Month: 11-month

Temporary/Permanent: Temporary
Duties and Responsibilities (* denotes essential functions):

1. *As a member of the UH Information Security team, oversees, manages & maintains the UH information security data protection, risk management, and compliance program. Serves as the primary Research SRE (Secure Research Enclave) Technical Analyst. Provides technical expertise to ensure research productivity while maintaining the integrity of controlled technology environments related to Cybersecurity Maturity Model Certification (CMMC) and other international, federal, state research compliance regulations.
2. *Responsible for the design, implementation, and oversight of security frameworks required for federally funded research. This includes ensuring that the university infrastructure and specific secure research enclaves (SREs) meet the requirements of CMMC, NIST SP 800-171 (Protecting Controlled Unclassified Information), NIST SP 800-53 (Federal Information Systems), HIPAA and other applicable federal regulations.
3. *Works directly with individual researchers and research groups to aid adoption and application of secure cloud resources (AWS, GCP, Azure) to support research.
4. *Participates in the architecture, design, and capacity planning for Secure Research Data Enclaves on commercial clouds in cooperation with ITS Research Cyber Infrastructure (RCI) group, ITS Technology Infrastructure (TI) group and other teams and the Information Security Compliance Analyst.
5. *Conducts "computational intake" interviews to translate research goals into technical cloud architectures. Guides researchers in selecting the appropriate cloud services (IaaS, PaaS, SaaS) and resource types for their specific workloads.
6. *Assists with the implementation and enforcement of policies regarding the handling, use, and storage of restricted, Federal Contraction Information (FCI), Controlled Unclassified Information (CUI), and HIPAA data within cloud environments.
7. *Educates and advises researchers on approaches for ensuring compliance with relevant security regulations in cloud and local environments.
8. *Assists researchers in deploying environments that adhere to System Security Plans (SSPs), ensuring that technical controls (e.g., MFA, encryption, log management) are operational and compliant with NIST 800-171/CMMC requirements.
9. *Reviews third-party cloud services implementations intended for use in regulated research projects to ensure alignment with relevant federal and other security standards.
10. *Responds to help requests and works with the Research Cyberinfrastructure (RCI) and InfoSec teams to find solutions that support the researcher while maintaining compliance.
11. *Collaborates with the Research Security Compliance Analyst to map existing technical controls in cloud deployments to appropriate CMMC levels and remediate gaps.
12. *Organizes workshops and training materials for secure cloud resources, specifically tailored for researchers handling regulated data.
13. *Develops documentation and tutorials on how to provision and utilize secure cloud resources effectively and securely.
14. *Directs student employees to work with research projects to document and organize the artifacts (evidence that shows all of the requirements of regulations) for the required security rules and regulations.
15. *Assist grant writers with the "Facilities, Equipment, and Other Resources" and "Data Management Plan" (DMP) sections of grant proposals (NSF, NIH, DoD, etc.) and provide technical cost estimates for grant budgeting to ensure research projects are sustainably funded in the cloud.
16. * Assists in operating and monitoring the integrity of secure cloud systems (virtual machines, storage, networks) and conducts cloud infrastructure administration duties to keep up with the pace of complex research problems and ensure security compliance.
17. *Assists with vulnerability assessments of deployed research environments to identify deficiencies in security.
18. *Work with Principal Investigators, Office of Research Compliance, Office of General Counsel, Information Security Team, and other stakeholders to ensure that incidents involving FCI, CUI, HIPAA, and other regulated data are reported to federal agencies within required timelines. Implement and maintain appropriate processes for reporting security violations to appropriate reporting authorities. Participates in security incident responses & investigations, including any emergency situations, and provides remediation support.
19. Attend regional or national multi-day trainings, meetings or conferences.
20. *Follows and implements directives and guidance related to best practices from University of Hawai'i System Information Technology Services.
21. *Ensures the consistent adoption, implementation, and enforcement of recommendations issued through University of Hawai'i System Information Technology Service.
22. *Keeps abreast of recommendations issued through University of Hawai'i System Information Technology Service, and takes timely action as needed.
23. *Continuously monitor and lead initiatives to enhance system reliability, security, and operational efficiency. Supervise and mentor IT staff to assure that administrative directives and industry best practices are understood and followed.
24. Other duties as assigned.

Minimum Qualifications

1. Possession of a pertinent baccalaureate educational degree in Computer Sciences or Information Security or related field and 5 years of progressively responsible professional information technology experience with responsibilities for information security, of which 2 years of the experience must have been comparable in scope and complexity to the next lower pay band in the University of Hawai'i broadband system; or any equivalent combination of education and/or professional work experience which provides the required education, knowledge, skills and abilities as indicated.
2. Considerable working knowledge of information security as demonstrated by the broad knowledge and understanding of the full range of pertinent standard and evolving information technology concepts, principles and methodologies.
3. Considerable working knowledge and understanding of the broad technology, systems, hardware and software associated with information security.
4. Demonstrated ability to recognize a wide range of intricate problems, use reasoning and logic to determine accurate causes, and apply principles and practices to determine, evaluate, integrate, and implement practical and thorough solutions in an effective and timely manner.
5. Proven ability to comprehend, interpret and implement administrative directives and guidance to ensure IT operations align with organizational standards and industry best practices.
6. Demonstrated ability to interpret and present information and ideas clearly and accurately in writing, verbally and by preparation of reports and other materials.
7. Demonstrated ability to establish and maintain effective working relationships with internal and external organizations, groups, team leaders and members, and individuals.
8. If applicable, for supervisory work, demonstrated ability to lead subordinates, manage work priorities and projects, and manage employee relations.
9. Ability to translate complex federal rules, regulations and requirements into actionable steps.
10. Ability to apply information technology concepts, principles and methodologies to a broad range of research projects and environments.
11. Considerable working knowledge and experience with NIST 800-171 and NIST 800-53 including SSPs and POAMs.
12. Functional knowledge of information security principles and familiarity with frameworks such as NIST 800-171, HIPAA, or CMMC.
13. Strong understanding of IT service management, cybersecurity principles, risk management, and compliance requirements. Demonstrated experience implementing and maintaining IT best practices, standards, and governance.
14. Considerable knowledge of international, federal, state and local laws, rules, regulations related to information security, privacy and higher education.
15. Considerable working knowledge of current information security technologies and tools.
16. Considerable work experience in cloud computing or research computing.
17. Knowledge of basic computing paradigms, software installation, and commercial cloud platforms (AWS, GCP, Azure).
18. Understanding of virtual networks, identity management, compute and storage solutions within a commercial cloud context.
19. Working knowledge of computer forensics and investigative techniques.
20. Experience with systems, systems administration, and network hardware and administration.
21. Demonstrated ability to develop effective training materials.
22. Demonstrated ability to develop and conduct effective in-person training/workshops.
23. Demonstrated ability to combine and apply skill sets from many areas of IT.
24. Demonstrated ability to speak, read, comprehend, interpret and write fluently in English.
25. Demonstrated ability to learn and apply new technologies independently and in a timely manner using books, manuals, online research, and other resources.
26. Working knowledge of common Internet protocols (such as TCP/IP) and applications.
27. Working knowledge of one or more programming or scripting language.
28. Ability to manage multiple projects.
29. Ability to travel out-of-state.
30. Ability to work a variable work schedule; and work outside normally scheduled work hours including day, night, weekend and/or holiday hours as directed.

Desirable Qualifications

1. Certifications related to the information security area (e.g. CISSP, GIAC/GSEC, CISM, etc.)
2. Experience with configuring and implementing technical security solutions.
3. Ability to supervise student employees.
4. Cybersecurity experience in or with higher education.

To Apply:

Click on the "Apply" button on the top right corner of the screen to complete an application and attached required documents.

Note: If you have not previously applied for a position using NeoGov, you will need to create an account.

Applicants must submit the following:

1. Cover letter to the selection committee indicating interest in the position and how the minimum and desirable qualifications are met,
2. Resume,
3. The names and contact information (telephone number and email addresses) of at least three (3) professional references, and
4. Copies of educational transcripts are acceptable; however, original official transcripts will be required at time of hire. Diplomas and copies will NOT be accepted. Transcripts issued from an institution outside of the United States of America (USA) require a course-by-course analysis with an equivalency statement from an agency having membership with the National Association of Credential Evaluation Services, Inc., verifying the degree equivalency to that of an accredited institution within the USA. Expense of the evaluation shall be borne by the applicant.

Late or incomplete applications will not be considered. The application will be considered incomplete if any of the required documents/materials are not included or are unreadable.

Please redact references to social security numbers and birthdate on submitted documents.

Employment may be contingent on verification of credentials and other background information, including the completion of a criminal history check.
Inquiries:
(808) 956-9098, [email protected]