Lead Security Analyst, Research Computing

University of Tennessee College of Arts & Sciences

Lead cybersecurity governance, compliance, and incident response for UT Knoxville’s research computing environments. Protect sensitive and regulated research data through security controls, risk management, and audit readiness.

Posted 8/5/2026full-timeKnoxville • Tennessee • 🇺🇸 United StatesSenior💰 $100,000 - $110,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity governance, risk assessment methodologies, and compliance with NIST standards, HIPAA, and FERPA. Proven ability to lead security operations, mentor teams, and communicate complex security requirements effectively to diverse stakeholders.

Highest-signal resume keywords

Cybersecurity GovernanceNIST 800-171 ComplianceRisk Assessment MethodologiesSecurity Documentation DevelopmentIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security ServicesControl FrameworksRisk Mitigation PlanningCompliance Artifact MaintenanceSecurity Control Analysis

Soft Skills

Strong Communication SkillsLeadershipCollaborationMentoring

Tools & Technologies

Governance, Risk, and Compliance ToolsWorkflow SystemsSpreadsheets

Certifications & Qualifications

Security+CISSPCISMCISACGRCCAP

Industry Keywords

Research ComputingHigher EducationExport ControlControlled Unclassified InformationCybersecurity Incident Response

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Provide leadership for the Research Computing Security team, including planning, direction, activity prioritization, performance management, and professional development
Lead projects to design, implement, and mature security controls across research computing environments
Mentor team members on regulatory awareness, evidence quality, customer-facing security operations, and research security best practices
Serve as a subject matter expert and trusted advisor to researchers, principal investigators, research computing staff, compliance partners, and central IT
Oversee compliance activities for NIST 800-171, NIST 800-53, CMMC, HIPAA, FERPA, and export control requirements
Prepare and maintain artifacts for assessments, audits, attestations, and ongoing compliance reviews
Direct and coordinate risk assessments, gap analyses, and periodic control reviews
Document findings, rate risk, recommend mitigation strategies, and support continuous monitoring and risk acceptance workflows
Review contracts and agreements and provide guidance on export controls, sanctions, and research security compliance obligations
Communicate requirements and assist with training, awareness, issue escalation, and reporting
Coordinate and validate administrative, technical, and physical security controls for environments handling controlled, restricted, or sensitive data
Track remediation activities, exceptions, inherited controls, and supporting evidence
Maintain audit-ready security documentation, including system security plans, control narratives, procedures, implementation statements, inventories, diagrams, and plans of action and milestones
Monitor, triage, and investigate security alerts affecting research computing systems and services
Oversee escalation handling for security events affecting regulated research customers
Serve as the subject matter expert for cybersecurity incident response activities within research computing environments
Support incident response activities for other university departments, units, and colleges as needed
Assist in developing and participating in tabletop exercises and penetration testing activities

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology Management, IT Security, or a related field
Seven (7) years of relevant experience providing information security services for an organization of similar function and size
Extensive knowledge of cybersecurity governance, control frameworks, and risk assessment methodologies relevant to research environments
Extensive knowledge of NIST 800-171, NIST 800-53, CMMC, HIPAA, FERPA, and common regulatory or sponsor requirements affecting research computing
Skill in developing and maintaining control documentation, evidence repositories, diagrams, and audit-ready compliance artifacts
Skill in analyzing technical and procedural controls, identifying gaps, and documenting practical risk mitigation plans
Strong communication skills with the ability to explain security requirements to researchers, technical staff, and non-technical stakeholders while managing multiple compliance efforts
Demonstrated ability to lead work, coordinate priorities, and contribute to security operations in complex, highly collaborative environments
Applicants must be legally authorized to work in the United States on a full-time basis without need now or in the future for sponsorship for employment-based visa status
Preferred: ten (10) or more years of relevant experience
Preferred: at least three (3) years of experience in a research computing environment
Preferred: experience leading security or compliance efforts in higher education, research administration, or other regulated environments
Preferred: knowledge of higher education research administration, export control, and controlled unclassified information requirements
Preferred: knowledge of cloud and hybrid research computing architectures, data classification, and secure enclave design
Preferred: experience using governance, risk, and compliance tools, spreadsheets, and workflow systems to manage control status and POA&Ms
Preferred: ability to interpret contract clauses and translate sponsor or regulatory requirements into operational security controls
Preferred: relevant certifications such as Security+, CISSP, CISM, CISA, CGRC, or CAP
Required application attachments: resume and cover letter

Benefits

Comp & perks

Career development and coaching
Continued education
Extensive development and training possibilities
Work-life balance
Compensation
Innovation leadership
Resume and cover letter submission support