Information Security Analyst for Research

Chapel Hill, North Carolina, Employment Type: Permanent Staff (EHRA NF) Vacancy ID: NF0010149 Salary Range: $100,000 - $120,000 Position Summary/Description: The Information Security Analyst for Research serves as the primary information security expert for Sheps( DATA )+, supporting system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements. The Information Security Analyst works alongside technical staff to ensure that system architectures, application designs, and operational workflows are aligned with applicable compliance frameworks while also ensuring that the appropriate institutional offices are engaged. They are tasked with fulfilling the system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems. Education and Experience: * Experience in a research, academic, health care, or public-sector environment involving regulated or sensitive data. * Familiarity with University information security processes, data use agreements, business associate agreements, or third-party security assessments. * Experience working with cloud-hosted systems, secure research computing environments, or application development teams. * Ability to develop templates, guidance materials, or repeatable processes that improve security planning and compliance operations. * Relevant security, privacy, audit, or risk management certification, such as CISSP , CISA , CISM , Security+, or comparable credential. Essential Skills: * Must have demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments. * Must have working knowledge of relevant security and privacy frameworks, such as HIPAA , NIST , ISO 27001/27002, SOC 2, or comparable standards. * Must have experience supporting security planning, risk assessment, vulnerability management, or security testing activities. * Must have the ability to communicate security requirements clearly to technical and non-technical audiences. * Must have strong organizational skills and the ability to coordinate documentation, reviews, and follow-up activities across multiple systems or stakeholders. AA/EEO Statement: The University is an equal opportunity employer and welcomes all to apply without regard to age, color, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, or sexual orientation. We encourage all qualified applicants to apply, including protected veterans and individuals with disabilities.