SOUTH DAKOTA BOARD OF REGENTS

Logo

Institution South Dakota Mines

Working Title IT Cybersecurity Maturity Model Certification (CMMC) Specialist

Posting Number CSA02451P

Department SDSMT-Information Technology 1

Physical Location of Position (City) Rapid City

Posting Text

LOCATION: Information Technology

POSITION CLASSIFICATION: Cybersecurity Analyst (IT 7S) or Cybersecurity Engineer (IT 9S)

MINIMUM STARTING SALARY: $73,063.30 – $88,063.49+, depending on education and experience (Pay Grade IT7S/IT9S)

POSITION PURPOSE:

South Dakota Mines is seeking a dedicated and knowledgeable IT Specialist for Cybersecurity Compliance to lead our Cybersecurity Maturity Model Certification (CMMC) efforts. This role is critical in ensuring the security of Controlled Unclassified Information (CUI) and safeguarding the university’s Department of Defense (DoD) research portfolio. The specialist will be responsible for developing, implementing, and managing a secure and compliant enclave for CUI data, ensuring adherence to federal cybersecurity regulations. This position will play a pivotal role in mitigating contractual risks, protecting the university’s research enterprise and maintaining the institution’s reputation as a trusted partner in national security research.

Key Responsibilities:

• Lead CMMC Compliance Program: Oversee the university’s Cybersecurity Maturity Model Certification (CMMC) compliance program, from initial gap analysis to final certification and continuous monitoring. This position will serve as the principal architect and leader of the university’s comprehensive Cybersecurity Maturity Model Certification program.
• Documentation Management: Develop and maintain essential documentation, including the System Security Plan (SSP) and Plan of Action & Milestones (POA&M). This position will oversee the lifecycle management of the full CMMC program.
• Policy Development: Create and implement university-wide security policies and procedures that translate CMMC requirements into actionable practices.
• Audit and Assessment Management: Manage and lead the response for all internal and external CMMC audits and assessments.
• Risk and Vulnerability Management: Conduct risk assessments and oversee the vulnerability management lifecycle for the Controlled Unclassified Information (CUI) environment.
• Collaboration with Researchers: Work closely with researchers and Research Affairs to develop Technology Control Plans (TCPs) that convey the data flow of CUI data on research projects.
• Continuous Improvement: Regularly conduct internal audits to assess the effectiveness of security controls and provide reports and briefings on program status, risks, and milestones to university leadership.
• Primary Contact for Assessments: Act as the primary point of contact for third-party assessment organizations (C3PAOs) during official CMMC and other assessments.
• Team Member for ITS department: Position will be integrated with the IT department to provide support to campus.

Classification & Qualifications:

This position requires access to federal government data made available through grant funding which limits access to U.S. citizens. Proof of U.S. citizenship will be required prior to hire.

Final classification for this position will be determined at the time of hire based on the selected candidate’s experience and qualifications for the position:

• Option 1: Cybersecurity Analyst (Pay Grade 7S – IT CSA Pay Structure)
  • Minimum Qualifications – Requisite Knowledge, Skills, and Experience:
    • Knowledge and skill in cybersecurity fundamentals such as incident management, forensic analyses, obfuscation techniques, vulnerability scans, threat intelligence, encryption, and decryption.
    • Broad understanding of client/server and webserver architectures and systems.
    • Broad understanding of networking technologies, architectures, and tools.
    • Knowledge of Internet network addressing.
    • Familiarity with programming languages and methodologies.
    • Knowledge of data management, retrieval systems, transfer technologies, and backup systems.
• Option 2: Cybersecurity Engineer (Pay Grade 9S – IT CSA Pay Structure)
  • In addition to meeting the qualifications of the Analyst level listed above, candidates must also demonstrate:
    • A strong understanding of cybersecurity industry standards.
    • The ability to design, improve, secure, and standardize processes related to:
      • Networking
      • Software development
      • Systems engineering
      • Financial and risk analysis
      • Security intelligence

TO APPLY:

South Dakota Mines is committed to recruiting and retaining a talented workforce and offers an excellent comprehensive benefits package including medical, dental, vision, and life coverage options for employees, spouses and dependents; retirement plans; paid holidays; and a generous vacation and sick day allowance. Individuals interested in this position must apply online at Careers at Mines. Human Resources can provide accommodation to the online application process and may be reached at (605) 394-1203. Review of applications will begin August 20, 2025, and remain open until it is filled. Employment is contingent upon completion of a satisfactory background investigation.

Please attach a cover letter, resume, and a list of three professional references (include name and email address for each reference).

Posting Date 08/13/2025

Closing Date

Open Until Filled Yes

First Consideration Date 08/20/2025

Advertised Salary MINIMUM STARTING SALARY: $73,063.30 - $88,063.49+, depending on education and experience (Pay Grade IT7S/IT9S)

Duration of the Term 12 months

If Other, describe duration

Appointment Percent 100

Work Hours

7:30am-4:30pm

Typical Hours Worked Per Week

Appointment Type Regular

Scope of Search External (includes Internal)

If internal, define scope of search

This position requires Travel, Overnight stays, Weekends/Holidays, Valid Drivers License

If other, please indicate

Department Description and Cultural Expectations

Equal Employment Opportunity Statement

South Dakota Mines is an Equal Opportunity Employer. South Dakota Mines and the Board of Regents ensures that all employment practices are free of discrimination.

Contact Information

Please check the appropriate response that describe the cognitive requirements for this position. Analyzing, Comprehend, Frequent Change, Logic, Multiple Priorities, Reading, Reasoning, Verbal Communication, Written Communication

Please check the appropriate response for this position's use of the following protective clothing or equipment.

If other protection is used please identify

Please designate the physical requirements of this position Bending, Stooping, Twisting, Carrying, Climbing Ladders, Climbing Stairs, Crouching, Fine Finger Manipulation (keyboarding, pipefitting, bench work, etc), Grasping, Lifting Above Waist, Lifting Below Waist, Lifting light, Lifting moderate, Lifting heavy, Pushing/Pulling, Reaching, Repetitive Motion, Sitting for sustained periods of time, Standing for sustained periods of time, Use of Either Hand, Independently, Walking

Describe any of the conditions selected

Please check the appropriate response that describe the sensory requirements for this position.

Working Conditions or Exposures (or potential exposures) that this position may encounter during the course of the work day. Changes of Temperature, Electrical Current, Exposure to Dust, Exposure to Noise, Walking/Standing on rough or uneven surfaces (gravel, rocks, etc), Walking/Standing on wood, metal or concrete, Work in confined/congested spaces (tunnels), Work in narrow aisles/passageways, Working Around Machinery

Please describe, in more detail, any of the conditions checked above

Check the appropriate box(es) that best describes the environment in which the primary function of the position is performed. Office Environment

If you have indicated Other Environment, if work tasks involve one or more of the above, or if further explanation is necessary, please use the space provided.

Read Full Description