Information Security Analyst

Support Indiana University researchers with practical cybersecurity guidance, compliance consulting, and resources through the Secure My Research team. This onsite role in Bloomington, IN combines security analysis, lifecycle support, and educational outreach, helping reduce the administrative and technical burden on research teams.

Salary: USD 68,200 - 77,000 annually (exempt).
Experience: 2+ years.
Education: Bachelor’s degree (preferably computer science or related).

• Work closely with researchers and partners across the university to understand project goals, technical needs, and stakeholder obligations.
• Translate technical, policy, contractual, and regulatory requirements into approaches that support both effective cybersecurity and research productivity.
• Perform case intake and triage
  , reviewing and responding to cases in a timely manner.
• Provide continuing cybersecurity guidance throughout the research lifecycle
  .
• Develop and maintain secure research workflows, guidance, and institutional solutions designed to lower administrative and technical overhead for researchers.
• Help research teams build cybersecurity documentation needed for institutional approval processes and support system owners through those steps.
• Support incident response investigations and assist with disaster recovery and business continuity efforts.
• Conduct experienced analysis and monitoring of technology environments to identify exposures and potential threats.
• Assess risk levels to advise security leadership and department decision-makers on threat information and recommended protections.
• Collaborate across technical and nontechnical domains using judgment, analytical problem-solving, and clear communication.

• Research solutions and create practical how-to content for common research cybersecurity and compliance needs in the Secure My Research Cookbook.
• Review and update existing materials so they remain accurate and current as technologies, services, and institutional requirements change.
• Develop and deliver presentations, educational resources, and outreach activities to increase awareness of research cybersecurity practices and Secure My Research  services.
• Incorporate current institutional requirements, cybersecurity practices, and participant feedback into training materials.
• Create best-practices information bulletins for faculty, staff, and students.
• Participate in departmental meetings and researcher-facing events, and coordinate with the Center for Applied Cybersecurity Research through center meetings, required training compliance, center communications, and related initiatives.

• Bachelor’s degree (preferably in computer science or related field).
• 2 years of information security or related experience.
• Proficient communication skills and professionalism.
• Time management and priority setting, with a strong commitment to quality.
• Ability to work in a fast-paced, dynamic environment and seek ongoing knowledge in your specialty area.
• Thoroughness, dependability, high accuracy under pressure, and attention to detail when communicating technical issues.
• Mental discipline for lengthy investigations.
• In-depth knowledge of Microsoft Windows or Unix-like operating systems.

• Microsoft Windows
• Unix-like operating systems
• NIST Risk Management Framework
• ISO/IEC 27001
• SOC 2
• HIPAA
• Common Rule
• CMMC

• Comprehensive medical and dental insurance
• Health savings account with generous IU contributions
• Healthcare and dependent care flexible spending accounts
• Basic group life insurance paid by IU
• Voluntary supplemental life, long-term disability, critical illness, and supplemental accidental death and…