Chief Research Security and Export Control Officer, Academic Affairs, Research and Student Success & Audit and Compliance - UT System Administration

Reporting to the Associate Vice President for Research (AVPR) and the Executive Director of Institutional compliance (EDIC), the Chief Research Security and Export Control Officer (RSECO) is responsible for implementing and overseeing the University of Tennessee's Research Security and Export Control programs to ensure the integrity and security of the University's research by implementing and enforcing regulations related to export controls, foreign influence, research compliance, Financial Conflicts of Interest/Conflicts of Commitment, visiting scholars’ access to research and/or clinical facilities and resources, Responsible Stewardship of Research Data, and Responsible Conduct in Research, among others. The RSECO will work closely with campus and institute counterparts to promote and facilitate compliance with federal and state laws and regulations, federal sponsor requirements and guidelines, and the University’s policies and procedures governing research security and export control across research, academic and business activities. Additional, the RSECO will serve as the Export Control Officer for select campuses and institutes within the UT System.

Specific responsibilities include but are not limited to:

In close coordination with the AVPR and the EDIC, the RSECO will implement policies and procedures to protect UT research from threats like foreign influence, intellectual property theft, and non-compliance with federal regulations, focusing on areas such as export control, cybersecurity, and personnel security:

• Regulatory Compliance: Ensure the UT system campuses and institutes and their research adhere to federal and state policies, including those related to foreign influence, export controls (ITAR, EAR, OFAC), controlled unclassified information (CUI), and cybersecurity standards (e.g., NIST SP 800-171).
• Risk Assessment & Mitigation: Perform comprehensive risk assessments to identify vulnerabilities and develop mitigation strategies for security threats.

International Activity Review: 

• Review requests for international visiting scholars, international travel, international agreements, and the shipment of controlled items to ensure compliance with export control regulations and address foreign influence risks according to policy.
• Training and Awareness: Identify and deliver system-wide training programs for - faculty and staff on security procedures and compliance requirements.

Information Security: 

• Implement policies and procedures for protecting sensitive research data, including CUI, and collaborating with IT on security for data environments.
• Technology Control Plans: Assist campuses, institutes, and researchers in developing and implementing Technology Control Plans (TCPs) to manage export-controlled information and technologies.
   

Coordination: 

• Work with various university departments, including Human Resources, IT, Legal Counsel, and academic departments, as well as external federal and state agencies.

Classified and CUI Programs: 

• Coordinate with the campuses to ensure workspaces, infrastructure, protocols for conducing classified and controlled unclassified information (CUI) research meets all relevant regulations and requirements.

UT System and select campus/institute Export Control Officer - 
In consultation with the AVPR and EDIC, the RSECO will ensure UTs compliance with laws and regulations governing the export of goods, technology, and services, preventing illicit diversion and ensuring national security for select campuses within the UT system:

Regulatory Compliance:

•  Develop, implement, and maintain export control programs, policies, and procedures to ensure compliance with federal and international laws and regulations.
   

Export Classification: 

• Determine the appropriate export classifications for products, technologies, and technical data. 

Licensing & Authorization: 

• Prepare and manage export license applications and other required documentation for government agencies.

Audits & Risk Assessment: 

• Conduct regular internal and external compliance reviews and risk assessments of export activities to identify non-compliance and implement corrective actions.

Training & Guidance:

• Provide guidance and training to employees and researchers on export control requirements and best practices.
   

Restricted Party Screening: 

• Perform screening of foreign partners and other parties against sanctioned lists to prevent unauthorized transactions.
   

Regulatory Monitoring: 

• Stay up-to-date with changes in export control laws and regulations and update internal procedures as necessary.
   

Liaison &a