Controlled Research Compliance Analyst, Office of Research Support and Compliance

Controlled Research Compliance Analyst, Office of Research Support and Compliance

The Office of Research Support and Compliance (ORSC) at The University of Texas at Austin functions to ensure that all research conducted at the University is in compliance with applicable laws, regulations, and University policies. The ORSC educates and supports the University research community with regulatory guidance concerning human subjects research (Institutional Review Board), animal research (Institutional Animal Care and Use Committee), use of biohazardous agents and use of recombinant or synthetic nucleic acids (Institutional Biosafety Committee), financial conflict of interest in research (FCOI), and research integrity education.

UT Austin offers a competitive benefits package that includes:

• 100% employer-paid basic medical coverage
• Retirement contributions
• Paid vacation and sick time
• Paid holidays
• Eligible for telework

Please visit our Human Resources (HR) website to learn more about the total benefits offered.

Purpose

The Controlled Research Compliance Analyst supports the University's controlled and restricted research compliance program by performing project-level compliance monitoring for research activities involving Controlled Unclassified Information (CUI), export-controlled information and technology, and other contractual or regulatory security requirements. Reporting to the Controlled Research Manager, the position supports compliance reviews, Technology Control Plan (TCP) development and maintenance, controlled research project onboarding, export-control reviews, documentation and records management, and risk identification, coordinating with researchers, research administrators, information technology, security, and facilities stakeholders.

Responsibilities

Controlled Research Compliance Monitoring

• Conduct recurring monitoring reviews of onboarded CUI and controlled research projects using established compliance rubrics, checklists, procedures, and review schedules.
• Evaluate project compliance with approved control plans, access requirements, security procedures, contractual obligations, and applicable University requirements.
• Document monitoring results, observations, deficiencies, corrective actions, and follow-up activities.
• Track changes to project personnel, scope, controlled information, systems, locations, and access requirements that may affect project compliance.
• Verify that required project documentation, training records, access approvals, and compliance records are current and complete.
• Identify potential compliance gaps and work with project stakeholders to obtain additional information or resolve routine deficiencies.
• Escalate significant findings, exceptions, unresolved compliance concerns, or potential violations to the Controlled Research Manager.
• Support internal reviews, audits, assessments, and investigations involving controlled research activities, and maintain accurate records of monitoring activities, findings, remediation efforts, and project status.

Controlled Research Plans and Project Onboarding

• Support the development, implementation, review, and maintenance of Technology Control Plans and related controlled research documentation.
• Gather project information from principal investigators, research administrators, technical personnel, and other stakeholders necessary to develop and maintain compliance documentation.
• Review project documentation for completeness, consistency, and alignment with identified contractual and regulatory requirements.
• Coordinate project onboarding activities and track required actions through completion.
• Assist with researcher onboarding, access-control coordination, training verification, and project documentation.
• Coordinate with information technology, security, facilities, and research personnel to support compliant research environments.
• Maintain project files, ensure that material project changes are documented and communicated, and support periodic review and update of existing TCPs.

Export Control and Research Security Support

• Conduct initial reviews of research agreements, awards, statements of work, and related materials to identify potential export-control, CUI, research security, or controlled research requirements.
• Support export-control reviews involving parties, destinations, end users, end uses, technology, equipment, and research activities.
• Conduct research, due diligence, and screening using approved University tools and authoritative sources.
• Document screening and review results, identify potential concerns, and escalate potential matches, exceptions, or complex regulatory questions for additional review.
• Support audits, reviews, and investigations related to export compliance and research security, and maintain appropriate supporting documentation.
• Assist with implementation and monitoring of Technology Control Plans when export-controlled information, technology, equipment, or activities are involved.
• Stay current with applicable export-control requirements and emerging controlled research compliance requirements.

Compliance Operations, Documentation, and Risk Analysis

• Maintain controlled research project records, compliance trackers, monitoring schedules, action items, and supporting documentation.
• Develop, update, and maintain workflows, forms, checklists, standard operating procedures, templates, and guidance materials.
• Review information from multiple sources to identify inconsistencies, compliance risks, missing information, or issues requiring additional review.
• Track corrective actions and follow up with responsible stakeholders to support timely completion.
• Analyze compliance data and project trends to identify recurring issues, process gaps, and opportunities for improvement, and develop routine metrics, status reports, and summaries for program leadership.
• Support incident documentation, fact gathering, and follow-up when security or compliance concerns affect controlled research.
• Assist with maintaining consistent documentation and evidence in preparation for audits, assessments, or program reviews.

Stakeholder Support and Training

• Serve as a day-to-day compliance resource for researchers, research administrators, technical teams, and other University stakeholders working with controlled research.
• Communicate compliance requirements, required actions, deadlines, and identified concerns clearly and professionally.
• Participate in project meetings, compliance reviews, onboarding meetings, and stakeholder discussions.
• Support development and delivery of training, outreach, job aids, guidance, and other educational resources.
• Build effective working relationships across research, administrative, technical, security, and operational teams, and translate regulatory and security requirements into practical guidance that enables research while maintaining required safeguards.

Other duties as assigned

• Complex matters, exceptions, and significant compliance concerns are escalated to the Controlled Research Manager.

Required Qualifications

• Five or more years of relevant experience in one or more of the following areas: compliance, risk management, investigations, intelligence analysis, information security, research administration, government contracting, project management, due diligence, regulatory operations, or a related field.
• Bachelor's degree in a relevant field or an equivalent combination of education and relevant professional experience.
• Demonstrated ability to review complex information, identify risks or inconsistencies, and document findings accurately.
• Strong organizational skills and demonstrated ability to manage multiple projects, cases, reviews, or competing priorities.
• Strong written and verbal communication skills.
• Demonstrated ability to develop clear documentation, reports, procedures, or analytical products.
• Ability to exercise sound judgment and discretion when handling sensitive or controlled information.
• Strong attention to detail and commitment to accurate recordkeeping.
• Ability to work effectively with technical and nontechnical stakeholders.
• Ability to independently research an issue, evaluate available information, and escalate matters when appropriate.
• Ability to learn and apply regulatory, contractual, technical, and institutional requirements.
• Must be a U.S. person, as defined by applicable export-control laws and regulations, and be eligible to access Controlled Unclassified Information (CUI) and export-controlled information. Certain assigned projects may require U.S. citizenship when required by applicable law, regulation, executive order, or government contract.

Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

• Experience conducting compliance monitoring, risk assessments, investigations, due diligence, intelligence analysis, or other structured analytical reviews.
• Experience with export controls, Controlled Unclassified Information, research security, or other regulated or sensitive information environments.
• Familiarity with NIST SP 800-171, CMMC, DFARS requirements, or similar federal security and compliance frameworks.
• Experience reviewing government contracts, grants, subawards, statements of work, or other documents for compliance or security requirements.
• Experience conducting open-source research, due diligence, restricted-party screening, supply-chain risk analysis, or similar investigative research.
• Experience working in government, military, defense, intelligence, federal contracting, higher education, research compliance, cybersecurity, or another highly regulated environment.
• Experience developing or improving workflows, standard operating procedures, checklists, metrics, or operational controls.
• Experience managing cases, projects, investigations, compliance reviews, or other work requiring structured follow-up