Cybersecurity GRC Team Lead

Remote-eligible opportunity offering flexible work arrangements, competitive benefits, and the chance to lead a highly impactful team within the Information Security Office (ISO) at UT Austin. The Cybersecurity Governance, Risk, and Compliance (GRC) Team Lead will oversee a team of analysts responsible for supporting security compliance efforts across a variety of university operations, with a notable focus on controlled research environments and compliance with CUI-related frameworks such as NIST 800‑171, DFARS, ITAR, and CMMC.

• Lead and manage a team of cybersecurity GRC analysts, focusing on:
  • Supporting the Controlled Research Program and ensuring alignment with CUI-related frameworks (e.g., NIST 800‑171, CMMC, DFARS, ITAR).
  • Conducting risk assessments, gap analyses, control reviews, and compliance documentation for enterprise‑wide regulatory frameworks such as HIPAA, PCI‑DSS, NIST 800‑53, GLBA, and others.
  • Advising on appropriate security controls, documenting implementation strategies, and helping units align with both external requirements and internal policy.
  • Overseeing development and maintenance of security compliance documentation including System Security Plans (SSPs), POA&Ms, risk registers, and internal/external audit response materials.
  • Working with stakeholders across the institution—IT leadership, research administration, legal, and compliance offices—to interpret regulatory requirements and provide practical guidance.
  • Serving as liaison between the ISO and external auditors, assessors, and institutional compliance teams.
  • Maintaining awareness of emerging regulatory requirements (e.g., new CMMC versions, updated HIPAA guidance, changes in PCI‑DSS) and proactively updating practices and communications.
  • Guiding and mentoring team members, supporting professional development and technical growth.
  • Participating in strategic planning and contributing to the long‑term vision of a cohesive, risk‑informed GRC program that supports research and administrative operations.
  • Ensuring continuous improvement of GRC processes, templates, and tools; supporting GRC platform management (e.g., Isora
    
    GRC).
  • Performing other duties as assigned to support the Information Security Office’s mission.

• U.S. Citizen, resident, or officially recognized asylee; applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information at the required level.
• Minimum of 5 years of experience in cybersecurity, risk management, compliance, or audit, with at least 2 years of leadership or supervisory experience.
• Demonstrated experience with multiple compliance frameworks, including NIST 800‑171, NIST 800‑53, HIPAA, PCI‑DSS, or similar.
• Strong understanding of controlled research requirements, particularly CUI, DFARS, and CMMC frameworks.
• Excellent verbal and written communication skills, including the ability to explain regulatory requirements to technical and non‑technical audiences.
• Experience creating, managing, or reviewing compliance documentation such as SSPs, POA&Ms, or risk registers.
• Proven ability to manage and prioritize multiple projects across a distributed team.
• Familiarity with GRC platforms or tooling (e.g., Isora
  
  GRC, Service Now GRC).

• Experience working in higher education or academic research settings.
• Experience with CMMC Level 2 compliance readiness or pre‑assessments.
• Experience managing or mentoring a cybersecurity or compliance team.
• Certifications such as CISSP, CAP, CISM, CISA, or relevant NIST/CMMC credentials.
• Familiarity with UT Austin’s information security policies, research infrastructure, or compliance structure.

$155,000 + depending on qualifications

• May work around standard office conditions.
• Repetitive use of a keyboard at a workstation.
• Use of manual dexterity.
• Remote‑eligible opportunity offering flexible work arrangements.
• Must use own internet service and mobile phone with voice and data plans for work.

• Competitive health benefits (employee premiums covered at 100%, family premiums at 50%).
• Voluntary Vision, Dental, Life, and…