Information Security Analyst for Research

A global higher education leader in innovative teaching, research and public service, the University of North Carolina at Chapel Hill consistently ranks as one of the nation's top public universities. Known for its beautiful campus, world-class medical care, commitment to the arts and top athletic programs, Carolina is an ideal place to teach, work and learn.

One of the best college towns and best places to live in the United States, Chapel Hill has diverse social, cultural, recreation and professional opportunities that span the campus and community.

University employees can choose from a wide range of professional training opportunities for career growth, skill development and lifelong learning and enjoy exclusive perks for numerous retail, restaurant and performing arts discounts, savings on local child care centers and special rates on select campus events. UNC-Chapel Hill offers full-time employees a comprehensive benefits package, paid leave, and a variety of health, life and retirement plans and additional programs that support a healthy work/life balance.

The Cecil G. Sheps Center for Health Services Research seeks to improve the health of individuals, families, and populations by understanding the problems, issues, and alternatives in the design and delivery of health care services. This is accomplished through an interdisciplinary program of research, consultation, technical assistance, and training that focuses on timely and policy-relevant questions concerning the accessibility, adequacy, organization, cost, and effectiveness of health care services, and the dissemination of this information to policymakers and the general public.

The Information Security Analyst for Research serves as the primary information security expert for Sheps( DATA)+, supporting system and development teams in designing and operating systems and applications that meet University, state, federal, and contractual security and privacy requirements.

The Information Security Analyst works alongside technical staff to ensure that system architectures, application designs, and operational workflows are aligned with applicable compliance frameworks while also ensuring that the appropriate institutional offices are engaged. They are tasked with fulfilling the system security planning, testing, monitoring, assessment, and reporting obligations for Sheps systems.

Master's and 1-2 years' experience; or Bachelors and 2-4 years' experience; or will accept a combination of related education and experience in substitution.

* Must have demonstrated experience interpreting and applying information security policies, standards, and controls in complex technical environments.
* Must have working knowledge of relevant security and privacy frameworks, such as HIPAA, NIST, ISO 27001/27002, SOC 2, or comparable standards.
* Must have experience supporting security planning, risk assessment, vulnerability management, or security testing activities.
* Must have the ability to communicate security requirements clearly to technical and non-technical audiences.
* Must have strong organizational skills and the ability to coordinate documentation, reviews, and follow-up activities across multiple systems or stakeholders.

* Experience in a research, academic, health care, or public-sector environment involving regulated or sensitive data.
* Familiarity with University information security processes, data use agreements, business associate agreements, or third-party security assessments.
* Experience working with cloud-hosted systems, secure research computing environments, or application development teams.
* Ability to develop templates, guidance materials, or repeatable processes that improve security planning and compliance operations.
* Relevant security, privacy, audit, or risk management certification, such as CISSP, CISA, CISM, Security+, or comparable credential.

The University is an equal opportunity employer and welcomes all to apply without regard to age, color, gender, gender expression, gender identity, genetic information, national origin, race, religion, sex, or sexual orientation. We encourage all qualified applicants to apply, including protected veterans and individuals with disabilities.