Job Description Summary

Reporting to the Manager of Governance, Risk and Compliance under the Chief Information Security Office, the Research Security Program Manager is responsible. This strategic role ensures institutional compliance with federal and state mandates, including NSPM-33, the CHIPS and Science Act, and regulations governing export control, controlled unclassified information (CUI), and foreign influence mitigation. The Program Manager directs and oversees the design, implementation, and daily administration of the research security program, interprets and applies relevant policies and regulations, and recommends new or revised initiatives to enhance institutional research security. They inform senior research leadership about issues that may impact the program or institutional issues affecting elements of the research security program. Additionally, the Program Manager responds to inquiries from internal and external stakeholders, communicates findings to federal agencies when necessary, and fosters a culture of security across the university’s research enterprise.

Entity

Medical University Hospital Authority (MUHA)

Worker Type

Employee

Worker Sub-Type​

Regular

Cost Center

CC002271 SYS - IS Cyber Operations

Pay Rate Type

Salary

Pay Grade

Health-29

Scheduled Weekly Hours

40

Work Shift

Job Description

1. Cybersecurity Compliance & Oversight – 15% 

• Develop, implement, and maintain cybersecurity components of MUSC’s Research Security Program in alignment with federal requirements, including NIST research cybersecurity resources. 

• Collaborate with the Information Security Office (ISO) to develop and manage NIST SP 800-171, NIST R8471, and CMMC requirements. 

• Identify research projects requiring NIST or CMMC controls and support research teams in meeting compliance expectations. 

• Coordinate integration of IT security resources into the research security program. 

• Monitor and ensure institutional alignment with CHIPS and Science Act cybersecurity requirements, federal agency guidance, and sponsor-specific expectations. 

 

2. Foreign Travel Security & International Research Risk Management – 15% 

• Manage the institution’s Foreign Travel Security Training Program, ensuring all covered individuals complete required periodic training. 

• Maintain the foreign travel reporting program for individuals traveling abroad for research, teaching, conferences, or MUSC business. 

• Provide expert guidance to faculty, staff, and trainees on international engagements, foreign influence, and high-risk outside activities. 

• Oversee research security risk assessments for international collaborations, visiting scholars, and high-risk foreign engagements. 

 

3. Research Security Training & Institutional Education – 20% 

• Lead implementation of comprehensive research security training tailored to MUSC’s risk profile and federal regulations. 

• Ensure covered individuals complete federally developed or MUSC-approved research security training modules. 

• Lead training, outreach, and educational activities related to research security. 

• Provide training content illustrating improper transfer of research or federally funded R&D. 

• Advise leadership on evolving regulations, risk tolerance, and best practices. 

• Maintain training documentation, certifications, and compliance records. 

 

4. Export Control Training & Compliance Support – 10% 

• Ensure covered individuals engaged in export-controlled research complete required training. 

• Coordinate delivery of federal or MUSC-developed export control education. 

• Oversee compliance reviews of foreign sponsors, collaborators, and research engagements to ensure alignment with export control regulations. 

• Maintain export compliance records and verify sponsor-required certifications. 

 

5. Program Leadership, Governance & Institutional Coordination – 35% 

• Design, implement, and maintain MUSC’s comprehensive Research Security Program in accordance with federal and state requirements. 

• Lead the Research Security Committee, supporting risk assessments, policy development, training needs, and strategic decision-making. 

• Serve on institutional committees and workgroups related to research compliance and risk mitigation. 

• Conduct investigations into research-related security concerns and report findings to internal stakeholders and federal agencies as appropriate. 

• Partner with the Office of Research and Sponsored Programs to ensure compliance with sponsor-required research security certifications. 

• Serve as the institutional primary point of contact for sponsors, regulators, and external stakeholders on research security issues. 

• Establish and report on Key Performance Indicators (KPIs) to evaluate program effectiveness. 

• Stay current on regulatory changes and evolving best practices through engagement in professional organizations and conferences. 

 

6. Other duties as needed - 5% 

 Research Security Program Oversight 

• Design, implement, and maintain a comprehensive research security program that meets federal and state requirements. 

• Advise senior leadership on evolving research security regulations, risk tolerance, and best practices. 

• Lead the Research Security Committee to evaluate institutional risks, formulate research security policies, identify training needs, and support strategic decision-making activities.  

• Provide expert guidance to faculty, staff, and trainees on international collaborations, foreign influence, and high-risk outside activities. 

• Conduct investigations into research-related activities that pose security risks and communicate findings to stakeholders, including federal agencies. 

• Oversee research security risk assessment for university activities, international research collaborations, visiting scholars (etc.,). 

• Serve on the various committees and workgroups engaged in mitigating risks associated with areas related to the institutional research security program.  

• Partner with the Office of Research and Sponsored Projects to ensure compliance with research security certifications and sponsor requirements. 

• Lead training, outreach, and guidance efforts related to research security.   

• Establish and report on Key Performance Indicators (KPIs) to measure program effectiveness. 

• Collaborate with Information Security Office (ISO) to develop and manage NIST SP 800-171, NIST R8471, and CMMC requirements.  

• Identify research projects requiring NIST R8471, CMMC or NIST SP 800-171 compliance and support research teams in meeting requirements. 

• Serve as the primary institutional point of contact for external sponsors and regulators on research security matters. 

• Stay current on regulatory changes and best practices through active participation in conferences and professional organizations. 

*This is not a fully remote position. Routine onsite work will be required.

Additional Job Description

Minimum Training and Experience Requirements: 

A bachelor's degree and four years relevant program experience. Exceptional communication and interpersonal skills with the ability to build trust across diverse stakeholder groups. Ability to work independently and collaboratively. 

 

Preferred Requirements: 

Experience in cybersecurity, research security, export controls, or federal research compliance at an academic or research institution. Experience engaging with federal agencies or research sponsors. 

If you like working with energetic enthusiastic individuals, you will enjoy your career with us!

The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.

Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: http://www.uscis.gov/e-verify/employees