Cybersecurity GRC Team Lead

Cybersecurity GRC Team Lead Location: Austin, TX Salary Range: $155,000 + depending on qualifications. Responsibilities Lead and manage a team of cybersecurity GRC analysts responsible for supporting the Controlled Research Program and ensuring alignment with CUI‑related frameworks (e.g., NIST 800‑171, CMMC, DFARS, ITAR) Conduct risk assessments, gap analyses, control reviews, and compliance documentation for enterprise‑wide regulatory frameworks such as HIPAA, PCI‑DSS, NIST 800‑53, GLBA, and others Advise on appropriate security controls, document implementation strategies, and help units align with both external requirements and internal policy Oversee development and maintenance of security compliance documentation including System Security Plans (SSPs), POA&Ms, risk registers, and audit response materials Work with stakeholders across the institution—IT leadership, research administration, legal, and compliance offices—to interpret regulatory requirements and provide practical guidance Serve as liaison between the ISO and external auditors, assessors, and institutional compliance teams Maintain awareness of emerging regulatory requirements and proactively update practices and communications Guide and mentor team members, supporting professional development and technical growth Participate in strategic planning and contribute to the long‑term vision of a cohesive, risk‑informed GRC program that supports research and administrative operations Ensure continuous improvement of GRC processes, templates, and tools; support GRC platform management (e.g., IsoraGRC) Required Qualifications U.S. Citizen, resident, or officially recognized asylee Minimum of 5 years of experience in cybersecurity, risk management, compliance, or audit, with at least 2 years of leadership or supervisory experience Demonstrated experience with multiple compliance frameworks, including NIST 800‑171, NIST 800‑53, HIPAA, PCI‑DSS, or similar Strong understanding of controlled research requirements, particularly CUI, DFARS, and CMMC frameworks Excellent verbal and written communication skills, including the ability to explain regulatory requirements to technical and non‑technical audiences Experience creating, managing, or reviewing compliance documentation such as SSPs, POA&Ms, or risk registers Proven ability to manage and prioritize multiple projects across a distributed team Familiarity with GRC platforms or tooling (e.g., IsoraGRC, ServiceNow GRC) Relevant education and experience may be substituted as appropriate Preferred Qualifications Experience working in higher education or academic research settings Experience with CMMC Level 2 compliance readiness or pre‑assessments Experience managing or mentoring a cybersecurity or compliance team Certifications such as CISSP, CAP, CISM, CISA, or relevant NIST/CMMC credentials Familiarity with UT Austin’s information security policies, research infrastructure, or compliance structure The University of Texas at Austin is an equal opportunity/affirmative action employer. We comply with all applicable federal and state laws regarding nondiscrimination and affirmative action. #J-18808-Ljbffr University of Texas