Information Security Analyst

Support Indiana University researchers with practical cybersecurity guidance, compliance consulting, and resources through the SecureMyResearch team. This onsite role in Bloomington, IN combines security analysis, lifecycle support, and educational outreach, helping reduce the administrative and technical burden on research teams.

Salary: USD 68,200 - 77,000 annually (exempt).
Experience: 2+ years.
Education: Bachelor’s degree (preferably computer science or related).

How you’ll make an impact

• Work closely with researchers and partners across the university to understand project goals, technical needs, and stakeholder obligations.
• Translate technical, policy, contractual, and regulatory requirements into approaches that support both effective cybersecurity and research productivity.
• Perform case intake and triage , reviewing and responding to cases in a timely manner.
• Provide continuing cybersecurity guidance throughout the research lifecycle .
• Develop and maintain secure research workflows, guidance, and institutional solutions designed to lower administrative and technical overhead for researchers.
• Help research teams build cybersecurity documentation needed for institutional approval processes and support system owners through those steps.
• Support incident response investigations and assist with disaster recovery and business continuity efforts.
• Conduct experienced analysis and monitoring of technology environments to identify exposures and potential threats.
• Assess risk levels to advise security leadership and department decision-makers on threat information and recommended protections.
• Collaborate across technical and nontechnical domains using judgment, analytical problem-solving, and clear communication.

SecureMyResearch resources and education

• Research solutions and create practical how-to content for common research cybersecurity and compliance needs in the Secure My Research Cookbook.
• Review and update existing materials so they remain accurate and current as technologies, services, and institutional requirements change.
• Develop and deliver presentations, educational resources, and outreach activities to increase awareness of research cybersecurity practices and SecureMyResearch services.
• Incorporate current institutional requirements, cybersecurity practices, and participant feedback into training materials.
• Create best-practices information bulletins for faculty, staff, and students.
• Participate in departmental meetings and researcher-facing events, and coordinate with the Center for Applied Cybersecurity Research through center meetings, required training compliance, center communications, and related initiatives.

What you bring

• Bachelor’s degree (preferably in computer science or related field).
• 2 years of information security or related experience.
• Proficient communication skills and professionalism.
• Time management and priority setting, with a strong commitment to quality.
• Ability to work in a fast-paced, dynamic environment and seek ongoing knowledge in your specialty area.
• Thoroughness, dependability, high accuracy under pressure, and attention to detail when communicating technical issues.
• Mental discipline for lengthy investigations.
• In-depth knowledge of Microsoft Windows or Unix-like operating systems.

Tools, frameworks, and standards you may work with

• Microsoft Windows
• Unix-like operating systems
• NIST Risk Management Framework
• ISO/IEC 27001
• SOC 2
• HIPAA
• Common Rule
• CMMC

Benefits at Indiana University

• Comprehensive medical and dental insurance
• Health savings account with generous IU contributions
• Healthcare and dependent care flexible spending accounts
• Basic group life insurance paid by IU
• Voluntary supplemental life, long-term disability, critical illness, and supplemental accidental death and dismemberment insurance
• Base retirement plan with generous IU contributions, subject to vesting
• Voluntary supplemental retirement plan options
• Tuition subsidy for employees and family members taking IU courses
• 10 paid holidays plus a paid winter break each year
• Generous paid time off plans
• Paid leave for new parents and IU-sponsored volunteer events
• Employee assistance program (EAP)

Working conditions and notes

• Sedentary work with periods of moving around an office environment and the campus.
• Must be able to perform essential functions with or without accommodation.
• Requires effective communication and the ability to operate a computer and standard office productivity equipment.
• Grant funded with expected annual renewals; renewals depend on availability of grant funds.

Department: Center for Cybersecurity Res (BL-CACR-IUBLA).
Location: Indiana University Bloomington.