Cybersecurity GRC Analyst

Job Posting Title: Cybersecurity GRC Analyst ---- Hiring Department: Information Security Office ---- Position Open To: All Applicants ---- Weekly Scheduled Hours: 40 ---- FLSA Status: Exempt from FLSA ---- Earliest Start Date: Immediately ---- Position Duration: Expected to Continue ---- Location: AUSTIN, TX ---- Job Details: General Notes This position can be a completely remote opportunity (within most of the United States) and provides life/work balance with typically a 40-hour work week. Flexible work arrangements are available for this position along with a competitive salary and benefits (and an amazing opportunity to make an impact and do good across the planet). The position resides within the Information Security Office (ISO) and plays a vital role in supporting the governance, risk, and compliance program—particularly in the area of controlled research and CUI (Controlled Unclassified Information) compliance. This person will work closely with the UTISO and campus partners to provide support for security controls, assessments, risk analysis, GRC tools, policies, processes, and industry framework review. You will get to work with a very intelligent and dedicated team to address enterprise cybersecurity challenges through novel approaches in an office that highly values work-life balance, the freedom to explore out of the box ideas, and serving others. Most importantly, you will help our researchers to securely advance their pursuits. What starts here changes the world! Your skills will make a difference You'll be working for a university that is internationally recognized for research and the work you do will make a difference in the lives of our students, faculty and staff. You’ll also be working for a team that is nationally respected by their peer community. If you're the type of person that wants to know your work has meaning and impact, you'll like working for our team. The Information Security Office at The University of Texas at Austin provides an outstanding benefits package to our staff. Those benefits include: Competitive health benefits (employee premiums covered at 100%, family premiums at 50%) Voluntary Vision, Dental, Life, and Disability insurance options Generous paid vacation, sick time, and holidays Teachers Retirement System of Texas, a defined benefit retirement plan, with employer matching funds Additional Voluntary Retirement Programs: Tax Sheltered Annuity 403(b) and a Deferred Compensation program 457(b) Flexible spending account options for medical and childcare expenses Robust free training access through LinkedIn Learning plus professional conference opportunities An exclusive incentive pay program A great physical office space should you prefer to work from campus Tuition assistance Expansive employee discount program including athletic tickets Free access to UT Austin's libraries and museums with staff ID card Free rides on all UT Shuttle and Austin CapMetro buses with staff ID card For more details, please see: https://hr.utexas.edu/prospective/benefits  and  https://hr.utexas.edu/current/services/my-total-rewards . This position requires you to maintain Internet service and a mobile phone with voice and data plans to be used when required for work. You must also be authorized to work in the United States on a full-time basis for any employer without sponsorship (e.g., US citizen, US resident, US asylee). Purpose The Cybersecurity GRC Analyst will focus on the development, maintenance, and execution of governance, risk, and compliance activities that support the university’s Controlled Research Program, including programs operating under NIST 800-171, DFARS, ITAR, and CMMC requirements. This position is part of the larger GRC function within the Information Security Office (ISO) and collaborates closely with researchers, sponsored programs offices, and technical teams to build and maintain compliant environments. Responsibilities Support and maintain the university’s cybersecurity GRC program, with a focus on research computing environments that handle Controlled Unclassified Information (CUI) or other regulated data. Coordinate and perform security assessments and risk evaluations of research systems and projects against applicable regulatory frameworks (e.g., NIST 800-171, CMMC, DFARS, ITAR). Collaborate with research IT, sponsored programs, legal, and research stakeholders to support secure and compliant research practices across the institution. Create, update, and cross-reference controls and documentation across multiple regulatory frameworks to support streamlined and unified GRC practices. Develop and maintain System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and other required compliance documentation for research programs. Work with ISO staff to extend enterprise policies and GRC tooling to meet the specialized needs of controlled research. Provide consulting and support to researchers and administrators on CUI compliance requirements, secure system design, and data handling best practices. Track and manage identified compliance gaps and risks in alignment with risk management strategies and institutional priorities. Contribute to broader ISO GRC initiatives such as policy development, compliance reporting, and framework alignment activities. Stay up to date on emerging federal compliance regulations and frameworks related to controlled research and incorporate into institutional practices as appropriate. Perform other duties as assigned to support the ISO’s cybersecurity and compliance objectives. Required Qualifications U.S. Citizen, resident, or officially recognized asylee - Applicant selected will be subject to government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to the project requirements of the position. Minimum of 3 years of experience in cybersecurity, audit,