Chief Research Security and Export Control Officer, Academic Affairs, Research and Student Success & Audit and Compliance - UT System Administration

About the role

The Chief Research Security and Export Control Officer (RSECO) is responsible for implementing and overseeing the University of Tennessee's Research Security and Export Control programs.

Responsibilities

• Implement policies and procedures to protect UT research from threats like foreign influence, intellectual property theft, and non-compliance with federal regulations, focusing on areas such as export control, cybersecurity, and personnel security.
• Ensure the UT system campuses and institutes and their research adhere to federal and state policies, including those related to foreign influence, export controls (ITAR, EAR, OFAC), controlled unclassified information (CUI), and cybersecurity standards (e.g., NIST SP 800-171).
• Perform comprehensive risk assessments to identify vulnerabilities and develop mitigation strategies for security threats.
• Review requests for international visiting scholars, international travel, international agreements, and the shipment of controlled items to ensure compliance with export control regulations and address foreign influence risks according to policy.
• Identify and deliver system-wide training programs for faculty and staff on security procedures and compliance requirements.
• Implement policies and procedures for protecting sensitive research data, including CUI, and collaborating with IT on security for data environments.
• Aid campuses and institutes in developing and implementing Technology Control Plans (TCPs) to manage export-controlled information and technologies.
• Work with various university departments, including Human Resources, IT, Legal Counsel, and academic departments, as well as external federal and state agencies.
• Coordinate with campuses to ensure workspaces, infrastructure, and protocols for conducting classified and controlled unclassified information (CUI) research meet all relevant regulations and requirements.
• Coordinate with the campuses to ensure workspaces, infrastructure, and protocols for conducting classified and controlled unclassified information (CUI) research meet all relevant regulations and requirements.
• Develop, implement, and maintain export control programs, policies, and procedures to ensure compliance with federal and international laws and regulations.
• Determine the appropriate export classifications for products, technologies, and technical data.
• Prepare and manage export license applications and other required documentation for government agencies.
• Conduct regular internal and external compliance reviews and risk assessments of export activities to identify non-compliance and implement corrective actions.
• Provide guidance and training to employees and researchers on export control requirements and best practices.
• Perform screening of foreign partners and other parties against sanctioned lists to prevent unauthorized transactions.
• Stay up-to-date with changes in export control laws and regulations and update internal procedures as necessary.
• Serve as a point of contact for regulatory bodies, government agencies, and other stakeholders on export control matters.
• Coordinate with campuses and other units in the development and review of reports required pertaining to foreign engagements and gifts.
• Provide individual campuses and/or institute support for those without sufficient resources and expertise to sufficiently and effectively staff these functions as they relate to research security and compliance.
• Other areas to be fleshed out: Risk Assessment and Mitigation, Regulatory Compliance, Researcher Education and Training.

Qualifications

• Bachelor’s degree in Cybersecurity, information technology, computer science, engineering, or related fields and 5 years of relevant, progressively responsible experience, or an equivalent combination of education, training, and experience.
• Experience managing significant projects.
• Strong understanding of research security and export control principles and regulations.
• Familiarity with relevant federal regulations, including the CHIPS and Science Act and NSPM-33.
• Familiarity with NISPOM requirements.
• Excellent analytical, communication, and interpersonal skills to work effectively with diverse stakeholders.
• Ability to assess and mitigate risks related to foreign influence and national security.