Research Security Compliance Specialist III

Position Highlights Serve as RIT’s lead resource for research security and sponsored research compliance, supporting federally funded and industry-sponsored research projects.

Coordinate compliance efforts related to CMMC 2.0, FCI, CUI, HIPAA, NSPM-33, GDPR, and other research security and data protection requirements.

Partner with principal investigators, sponsors, and campus stakeholders to assess compliance needs, develop project-specific security documentation, support audits and assessments, and ensure sponsored research activities meet regulatory and sponsor expectations.

Help translate complex sponsor and regulatory requirements into practical processes, policies, training, and institutional controls that enable research success while maintaining compliance.

Promote a culture of ethics, accountability, and compliance across the university's research enterprise.

This position is fully on campus and is not eligible for remote work. To receive full consideration, applicants must submit both a resume and cover letter with their application.

Sponsored Research Services, Office of the Vice President for Research Sponsored Research Services (SRS) supports RIT’s research community by providing guidance and oversight throughout the sponsored research lifecycle. Working closely with faculty, research staff, and campus partners, SRS helps ensure that research activities meet sponsor requirements and applicable regulations while advancing the university’s research mission.

The Research Security and Compliance Specialist plays a key role in strengthening RIT’s research security and compliance framework. This position collaborates with stakeholders across the university, including the Information Security Office, Research Computing, Information & Technology Services, Institute Audit, and academic units, to support secure research practices, data protection, and regulatory compliance. Through partnership, education, and process development, the team helps researchers navigate evolving security requirements and successfully manage sponsored research projects.

Essential Duties & Responsibilities Oversees compliance component of RIT's CMMC program for sponsored research cybersecurity. Assists cross-functional team with policy creation, implementation, operations, program roadmap, requirements, tracking of compliance gaps, and preparation for self-assessment and third-party assessment. Provides final compliance sign-off on processes needed to comply with federal and sponsor standards and other information research security standards

Ensures projects requiring protected research data are reviewed and supported before work begins. Assists with identifying cybersecurity and controlled-data obligations during proposal development, contract review, award set up, data use agreement review and project initiation.

Provides gap analysis and creates individualized information research security control plans for projects as necessary. Provides compliance certifications to sponsors. Documents processes and records demonstrating RIT reviews, attestations, and required training occurred on every sponsored project

Provides guidance, training, and consultation to research community, including developing and delivering training

Advises research community on information research security regulations, changes, and compliance processes

Other duties as assigned

Knowledge, Skills, & Abilities Knowledge of local, state, and federal laws and regulations that govern information research compliance standards

Knowledge of federal cybersecurity and controlled-research-data requirements impacting sponsored research

Understanding of network security, firewalls, encryption, cloud computing standards, and workstation security

Skill in risk…