APPLICATION INSTRUCTIONS:

• CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

• CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

• If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.

Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.

JOB DESCRIPTION AND POSITION REQUIREMENTS:

The cybersecurity compliance consultant assists in programs that ensure research cybersecurity compliance and cybersecurity policy and standards development at the University. The ideal candidate will serve as an expert in cybersecurity frameworks like NIST 800-171 and other relevant standards, ensuring that research activities adhere to regulatory and contractual obligations. They will stay updated and informed about emerging cybersecurity trends, risks, and best practices and recommend process improvements. This position will assist in advising and updating the University's cybersecurity policies and standards. They may collaborate with stakeholders across the organization to advise on compliance with regulations, standards, and best practices while enabling a culture of security awareness and governance. This position will interact most, as needed,  with the University's research community, including the Office of Sponsored Programs, to coordinate and implement cybersecurity initiatives. They will advise in the development, implementation and management of comprehensive security programs that contribute to the confidentiality, integrity, and availability of research data and intellectual property. This position frequently consults with the Office of General Counsel, Ethics and Compliance, and Procurement.

The ideal candidate will have a Bachelor's Degree or equivalent in Computer Science, Information Technology, Cybersecurity, Business, Law or equivalent work experience. A Master's Degree in Computer Science, Information Technology, Cybersecurity, Business, Law or equivalent is preferred.

3+ years experience in cybersecurity research compliance or general cybersecurity, including experience in developing cybersecurity policies, standards, or guidelines is required.

5+ years Experience overseeing or implementing research compliance based on NIST 800-171 or similar standards. Strong understanding of CMMC, DFARS-7012. Collaboration or participation with Institutional Review Boards or simi