JOB SUMMARYSupports the development, implementation, and operationalization of Information Security governance, risk, and compliance (GRC) functions to ensure alignment with established security frameworks, regulatory requirements, and institutional policies. Assists in managing information security risks and contributes to maintaining compliance across the organization.
Ideal Candidate:The ideal candidate will have
professional experience in Information Security Governance, Risk, and Compliance (GRC) and a strong understanding of core security and risk management principles. While specialized experience earlier in a candidate's career is welcomed, this position requires a well-rounded GRC professional who is comfortable working across a broad range of responsibilities. Candidates should demonstrate the ability to apply their experience to diverse governance, risk, compliance, and information security needs
BENEFITSUT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:
- PPO medical plan, available day one at no cost for full-time employee-only coverage
- 100% coverage for preventive healthcare-no copay
- Paid Time Off, available day one
- Retirement Programs through the Teacher Retirement System of Texas (TRS)
- Paid Parental Leave Benefit
- Wellness programs
- Tuition Reimbursement
- Public Service Loan Forgiveness (PSLF) Qualified Employer
- Learn more about these and other UTSW employee benefits!
EXPERIENCE AND EDUCATIONRequired- Education
Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.
- Experience
3-5 years of experience in information security, IT risk, compliance, or governance roles
Preferred- Licenses and Certifications
CISA (Certified Information Systems Auditor)
CRISC (Certified in Risk and Information Systems Control)
CISM (Certified Information Security Manager)
Security+ (for foundational knowledge)
ISO 27001 Lead Implementer / Lead Auditor
JOB DUTIES- Supports implementation and maintenance of risk management frameworks within the Information Security program.
- Performs security risk assessments for systems, third-party vendors, and technology procurement (e.g., ISAC).
- Documents findings and supports remediation tracking.
- Assists in tracking audit findings, coordinating responses, and supporting compliance with regulatory and internal requirements (HIPAA, NIST, CIS, etc.).
- Contributes to development of security metrics, KPIs, and reporting for operational and management visibility.
- Supports governance processes including documentation, standards, and policy alignment.
- Collaborates with technical teams, business units, and third parties to identify risks and support compliance efforts.
- Assists with maintaining risk registers, control inventories, and GRC tool updates.
- Supports Information Security initiatives and stays current with regulatory and security best practices.
- Performs other duties as assigned.
Knowledge, Skills and Abilities- Strong analytical and problem-solving skills
- Good communication and documentation skills
- Understanding of risk management and compliance concepts
- Ability to work with cross-functional teams
- Attention to detail and ability to manage multiple tasks
PHYSICAL REQUIREMENTS/WORKING CONDITIONSPhysical RequirementsWorking ConditionsSalary InformationSalary is commensurate with education, skills, and relevant experience.
