Research Compliance and Security Data Analyst

Caltech is a world-renowned science and engineering institute that marshals some of the world''s brightest minds and most innovative tools to address fundamental scientific questions. We thrive on finding and cultivating talented people who are passionate about what they do. Join us and be a part of the diverse Caltech community.

Job Summary

The Research Compliance and Security Data Analyst will report to the Associate Vice Provost for Research Policy and Compliance and will manage technical solutions associated with the Research Compliance and Security requirements. Specifically, they will design, build, and manage data-driven, AI-enabled, and web-based solutions that support the Institute''s research compliance and security efforts. This position is responsible for activities that ensure Institutional compliance with federal, state, and local regulations regarding research by applying programming, automation, data analytics, and artificial intelligence to compliance workflows and risk assessment. The primary areas of responsibility are improving the efficiency and quality of review and oversight activities for the Institute's research compliance committees such as the IACUC, IRB, IBC, RSC, and ESCRO, as well as assisting in establishing efficient processes and identification, review, and mitigation of research security risks, including conflicts of interest and commitment, export compliance, and NSPM-33 and Chips and Science Act compliance. Additional responsibilities include supporting Responsible Conduct of Research (RCR) and research misconduct processes where they intersect with compliance and security data.

Program management responsibilities include maintaining compliance data systems and dashboards, developing and documenting automated workflows, evaluating AI tools for responsible use, and partnering with Caltech's Information Management Systems (IMSS), Security, Office of Sponsored Research, and Office of the General Counsel.

Essential Job Duties

• Collects, analyzes, and provides reports regarding Institute data for research compliance committees (IACUC, IBC, RSC, IRB, ESCRO) and Research Security.
• Coordinates with IMSS and research compliance committees in developing scripts, applications, integrations, and automated workflows that support IACUC, IBC, RSC, IRB, and ESCRO/SCRO functions.
• Applies AI and machine learning tools (e.g., large language models, natural language processing, document classification) to assist with committee functions and research security requirements.
• Coordinates with IMSS, COI, and Export Compliance Analysts and Managers to maintain research security screening processes and tools, such as structured intake of disclosures, collaborator and affiliation checks, and screening against applicable restricted party, export control, and sponsor lists, and flags potential risks for expert review.
• Builds risk assessment and risk mitigation tools, including data-driven risk indicators, tracking of mitigation plans, and dashboards that give the Associate Vice Provost for Research Policy and Compliance and committee leadership visibility into compliance and security status.
• Analyzes compliance and security data to identify trends, gaps, and process improvements, and prepares regulatory, sponsor, and institutional reports and renewal documentation with accuracy and timeliness.
• Provides documentation and technical support for compliance staff, committee members, and investigators on new tools and automated processes.
• Maintains the Office of Research Policy, Research Compliance, and Research Security website and resources.
• Monitors developments in AI, research compliance and security technology, and applicable federal, state, and local regulations, and recommends updates to tools, policies, and procedures.
• Assists the Associate Vice Provost of Research Policy and Compliance/Institutional Official with other compliance requirements, as needed.

Basic Qualifications

• Bachelor''s degree in science, computer science, data science, information systems, engineering, or a related field, and a minimum of three years of relevant experience.
• Demonstrated proficiency in at least one programming or scripting language (e.g., Python, SQL, JavaScript).
• Hands-on experience applying AI tools or machine learning methods to real-world data or document workflows.
• Sound judgment in handling confidential and sensitive information, with attention to privacy and data protection.
• Independent, detail-oriented, reliable, with excellent analytical, problem-solving, and decision-making skills.
• Working knowledge of federal, state, and local regulations and institutional policies relevant to research compliance and research security.
• Excellent communication skills (both verbal and written), including the ability to explain technical concepts to faculty, committee members, and administrators.
• Proven strong organizational and project management skills and the ability to manage multiple projects effectively with minimal supervision.
• Strong computer skills, including experience with Microsoft 365 and use of databases or protocol management systems.

Preferred Qualifications

• PhD in cognitive science, computer science, data science, information systems, engineering, or a related field, or professional certification in research administration, compliance, or information security (e.g., CRA, CIP, CCEP, CISSP, CIPP).
• Experience supporting or administering research compliance functions at a university or research institution, such as IACUC, IBC, IRB, or ESCRO/SCRO, or in a research security or export controls office.
• Experience with electronic protocol or compliance platforms (e.g., Caltech's PAS, Huron, Cayuse, iRIS, Kuali, or similar), APIs, and system integration.
• Experience with prompt engineering, retrieval-augmented generation, and the evaluation of AI systems, including responsible AI, model governance, and data privacy practices.
• Familiarity with CITI online training platform.

Required Documents

• Resume
• Cover Letter
• Optional: Links to or descriptions of relevant technical projects (no confidential or proprietary data)