Research Data Security Manager

Job Description

The Research Data Security Manager is part of the Vice Provost for Research Compliance staff, and will also work closely with Information Technology Security. This position oversees data use, sharing, and security agreements for research across each of Boston College’s academic departments.

They will be expected to manage and secure all sensitive and restricted data sets used across the entire spectrum of university-related research projects. These data sets generally involve sensitive human subjects data, but must often comply with complex federal security requirements. This person would ensure compliance requirements related to data security in data use agreements and data sharing agreements, and assist faculty and staff in understanding these agreements.

This RDS Manager’s responsibility is university-wide. They will work with faculty across all schools, and will work with postdocs, graduate students, Deans, and leaders within the VPR and ITS offices.

The Research Data Security Manager will have the following duties:

• Collaborate with team members to create and/or implement a system to process and execute data sharing and data security agreements

• Create educational materials for faculty and staff on security topics such as responsible data sharing, CUI, GDPR, CMMC, NIST, NSPM-33

• Work with ITS staff to develop plans to implement and monitor physical and virtual storage of secure data

• Develop and implement an auditing plan to ensure compliance with data use and data security agreements

Conduct regular assessments and audits to ensure compliance with relevant standards.

Full-Time Equivalent Hiring Range: $104,500 to $130,600; salary commensurate with relevant experience.

Requirements

Bachelor’s degree and 4+ years of relevant experience required, with a strong understanding of an experience with IT technology, cybersecurity principles, network security principals, and incident response. Must have demonstrated familiarity with NIST and CMMC guidelines / Experience in cybersecurity compliance, with a focus on NIST 800-171 and CMMC requirements.

A master’s degree in Information Technology, Computer Science, Cybersecurity or a related field is preferred. Must have the ability to collaborate with and educate faculty and staff, many of whom will have limited understanding of security requirements. Must have excellent written and oral communication skills, and the ability to develop training materials for a non-technical audience.