Research Data Security and Compliance Analyst

This position is located within the Office of Research Compliance’s Research Information Security unit. The Research Data Security Analyst provides programmatic leadership and technical expertise to secure research data across the University of Maine, contributing to the management of the lifecycle of the research data security program to enable and protect research computing activities within academic units, Research Centers, and Institutes. Working in conjunction with the Office of Research Compliance, the Information Security Office, and UMS:IT, this role oversees the development, implementation, and continuous improvement of research-specific data security procedures, guidance, and infrastructure. Acting as a crucial liaison between research units and IT, the Analyst leverages existing tools to manage security initiatives, support the acquisition of IT infrastructure, and oversees the creation and updating of University of Maine System policies. Furthermore, this position leads the evaluation of data security requirements in research contracts and technology reviews, recommending compliant solutions to protect sensitive data, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), Covered Research Information, Protected Health Information (PHI), and Personally Identifiable Information (PII). Ultimately, the Analyst ensures comprehensive data stewardship by managing the review and compliance tracking of Data Use Agreements (DUAs) and their associated Data Security Plans, serving as a program lead in developing best practices for research data management. Typical hiring range for this position is $75,000 to $95,000 commensurate with qualifications and experience.

Please review the Research Data Security and Compliance Analyst job description for more information.

About the University:
The University of Maine is a community of more than 11,900 undergraduate and graduate students, and 2,500 employees located on the Orono campus, the regional campus in Machias, and throughout the state. UMaine is a land, sea and space grant university, and maintains a leadership role as the University of Maine System's flagship institution. UMaine is the state's public research university and a Carnegie R1 top-tier research institution, dedicated to providing excellent teaching, research and service for Maine, the nation and the world. More information about UMaine is at umaine.edu. 

The University of Maine offers a wide range of benefits for employees including, but not limited to, tuition benefits (employee and dependent), comprehensive insurance coverage including medical, dental, vision, life insurance, and short and long term disability as well as retirement plan options. 

UMaine is located in beautiful Central Maine. Many employees report that a primary reason for choosing to come to UMaine is quality of life. Numerous cultural activities, excellent public schools, safe neighborhoods, high quality medical care, little traffic, and a reasonable cost of living make the greater Bangor area a wonderful place to live. Visit the Maine Office of Tourism to learn more about what the Bangor region has to offer.

Qualifications:
Required:

• U.S. person status is required for this position to comply with the Arms Export Control and Export Administration Act. U.S. persons are U.S. citizens, legal permanent residents as defined by 8 U.S.C. 1101(a)(20) or protected individuals as defined by 8 U.S.C. 1324b(a)(3).
• Bachelor’s degree in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• At least three (3) years of relevant work experience.
• Demonstrated professional experience in export controls and/or research security with knowledge of relevant rules and regulations.
• Ability to complete Information Security Certification such as a CISSP, CISA, CISM or GIAC within three years of hire.

Preferred:

• Master’s degree or PhD in Computer Science, Information Science, Cybersecurity, Computer Engineering or a related field.
• Five (5) or more years of relevant work experience.
• Demonstrated ability to work autonomously but also within a team environment.
• Demonstrated excellent customer service and communication skills.
• Highly motivated, self-starter with ability to multi-task.
• Experience designing and managing a cybersecurity risk management program based on NIST standards and frameworks.
• Familiarity with NSPM-33 and CHIPS and Science Act of 2022 research security requirements.
• Knowledge of NIST 800 series security requirements and CMMC program requirements.
• Experience facilitating an information system security program within a complex organization.
• Demonstrated working experience at an accredited institution of higher education.
• Demonstrated working experience developing policies and procedures such as detailed documentation and training resources for customers.
• Program or project management experience and/or certification (e.g. PMP, PMI).
• Prior supervisory experience.
• Familiarity with HIPAA Security Rule and Privacy Rule guidelines.
• Eligible for, and able to obtain and maintain at least Secret level security clearance as required to perform assigned duties.
• Information Security Certification such as a CISSP, CISA, CISM or GIAC.

Other Information:

To be considered for this position you will need to “Apply” and upload the documentation listed below:

1.) a cover letter which describes your experience, interests, and suitability for the position
2.) a resume/curriculum vitae

Candidates selected to proceed to the final stages of the search process will be requested to provide a list of names and contact information for references.

Incomplete application materials cannot be considered. Materials received after the initial review date will be reviewed at the discretion of the University.

For full consideration, materials must be submitted by 4:30 p.m. EST on October 16, 2026.

The successful applicant is subject to appropriate background screening.

The University of Maine System (the System) is an equal opportunity institution committed to fostering a nondiscriminatory environment and complying with all applicable nondiscrimination laws. Consistent with State and Federal law, the System does not discriminate on the basis of race, color, religion, sex, sexual orientation, transgender status, gender, gender identity or expression, ethnicity, national origin, citizenship status, familial status, ancestry, age, disability (physical or mental), genetic information, pregnancy, or veteran or military status in any aspect of its education, programs and activities, and employment. The System provides reasonable accommodations to qualified individuals with disabilities upon request. If you believe you have experienced discrimination or harassment, you are encouraged to contact the System Office of Equal Opportunity and Title IX Services at 5713 Chadbourne Hall, Room 412, Orono, ME 04469-5713, by calling 207.581.1226, or via TTY at 711 (Maine Relay System). For more information about Title IX or to file a complaint, please contact the UMS Title IX Coordinator at www.maine.edu/title-ix/.

Clery Act

The Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, or Clery Act, mandates that all Title IV institutions, such as the University, prepare, publish and distribute an Annual Security Report, (ASR) and provide notice of the availability of the ASR to all prospective employees. This report consists of two basic parts: disclosure of the University’s crime statistics for the past three calendar years; and disclosures regarding the University’s current campus security policies. You may view theUniversity’s Annual Security Report. If you wish to have a paper copy of the ASR or you need to have a copy of the ASR in an accessible format, the University will provide such a copy upon request. Please contact: UMaine Police Department, 81 Rangeley Rd., The University of Maine, Orono, ME 04469-5794, or call 207.581.4053.