Information Security Engineer Iii-Ent

Information Security Engineer III-ENT

The University of Alabama at Birmingham (UAB) seeks an Information Security Engineer III-ENT to plan, design, enforce, and audit security policies and procedures that safeguard the integrity of and access to enterprise systems, files, and data elements. The role involves evaluating and recommending security products, services, and procedures to enhance productivity and effectiveness, and providing management with risk assessments and security briefings.

This position commits to fostering an environment of heightened security following IT Security Policies and participating in security training such as HIPAA and FERPA on an annual basis.

• Support research in maintaining institutional compliance with Controlled Unclassified Information (CUI) regulations, including NIST SP 800-171, CMMC, and other federal mandates.
• Collaborate with partners on a cloud‑based environment for CUI and work closely with researchers to ensure security controls align with federal standards.
• Develop and implement strategies for security control requirements ensuring adherence to all applicable regulations and policies.
• Stay updated on relevant regulations and policies related to research compliance and regulatory affairs.
• Provide guidance and support to researchers, faculty, and staff on IT compliance practices.
• Monitor the effectiveness of the research compliance program and make recommendations for improvement.
• Act as a point of contact for security controls and IT compliance‑related inquiries or concerns for research projects.
• Perform other duties as assigned.

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or a related field and five (5) years of related experience required. Work experience may substitute for the educational requirement. Certified Information Systems Security Professional (CISSP) certification preferred. IT experience specifically related to cybersecurity is necessary.

• Strong knowledge of NIST SP 800-171, CMMC, and federal CUI handling regulations.
• Experience writing system Security Plans, POAMs, Incident Response Plans.
• Experience working with cloud security solutions.
• Excellent written and verbal communication skills, with the ability to work across multidisciplinary teams.
• Experience with Gov Cloud or other secure cloud‑based research platforms.
• Prior experience in higher education research security.
• Certification or credentials related to Cybersecurity (CISSP, CISM, CISA, CCP).

UAB is an Equal Employment/Equal Educational Opportunity Institution dedicated to providing equal opportunities and equal access to all individuals regardless of race, color, religion, ethnic or national origin, sex (including pregnancy), genetic information, age, disability, and veteran status.

University

Shift: Day/1st Shift. Work arrangement:
Remote/Hybrid Eligible.