Controlled Research Compliance Manager, Office of Research Support and Compliance

The University of Texas at Austin•Austin, TX

2d•Remote

About The Position

The University of Texas at Austin’s Office of Research Support and Compliance (ORSC) seeks a detail-oriented Controlled Research Compliance Manager to support its controlled research program involving export-controlled information and Controlled Unclassified Information (CUI). The role focuses on regulatory compliance, oversight of CUI research activities, and coordination with university stakeholders to support secure, compliant research. The position is based in Austin, Texas, and is fully remote, with a 40-hour workweek. It is expected to continue. The manager leads development and operation of the CUI compliance program, translates regulatory and sponsor requirements into processes and tools, oversees project monitoring and documentation, and serves as a subject matter expert on CUI, NIST SP 800-171, and CMMC. The role coordinates with researchers, Enterprise Technology, the Information Security Office, the Office of Sponsored Programs, and other partners on project onboarding, secure environments, assessments, incidents, audits, and remediation. The manager also supervises staff and develops outreach, training, and guidance on controlled research.

Requirements

Bachelor’s degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions.
At least 3 years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions.
U.S. citizenship or U.S. person status.
Strong organizational, problem-solving, and decision-making skills.
Exceptional attention to detail and ability to analyze complex data.
Demonstrated leadership ability, including motivating and developing others, setting priorities, fostering collaboration, and leading a team toward organizational goals.
Excellent communication and interpersonal skills.
Ability to work collaboratively and maintain the integrity of secure research operations.
Relevant education and experience may be substituted as appropriate.

Nice To Haves

Master’s degree.
Knowledge of export controls, CUI requirements, and research security regulations.
Experience in cybersecurity, information security, research compliance, or secure data management.
Familiarity with risk management and data protection practices.
Familiarity with access control systems and secure facility procedures.
Familiarity with federal contracting terms and research compliance or security requirements.
Familiarity with a university research environment.

Responsibilities

Lead development and operation of the CUI compliance program, including defining its operating model and implementing processes and tools.
Translate regulatory and sponsor requirements into practical, repeatable workflows and develop supporting materials such as Technology Control Plan templates, onboarding forms, and monitoring checklists.
Plan and prioritize program work, including project tracking and onboarding, monitoring cycles, and training.
Keep the Senior Director of Research Security informed about program status, metrics, risks, and significant findings.
Assess monitoring results, cycle times, workload, and stakeholder feedback to identify gaps and implement continuous process improvements.
Serve as the primary liaison among researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs for CUI project onboarding and secure research practices.
Partner with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments; align security controls with CUI requirements; and coordinate assessments, incident response, and remediation.
Document and periodically assess end-to-end processes, including roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners.
Coordinate program preparation for and response to CUI-related audits and investigations, and maintain associated program documentation and records.
Oversee the design, implementation, and operation of CUI compliance forms and workflows in electronic systems, including Kuali and future platforms.
Monitor regulatory and sponsor requirements, including NIST SP 800-171 and CMMC, and recommend program updates based on emerging requirements, trends, and peer practices.
Provide authoritative CUI guidance to researchers, research administrators, and program partners, and serve as a technical resource for the Compliance Monitor.
Design and refine a monitoring rubric and checklist for onboarded CUI projects; evaluate monitoring processes and tools for consistency and program integrity.
Conduct regular monitoring reviews of CUI projects with program partners to verify compliance with Technology Control Plans and System Security Plans, and document the reviews.
Monitor CUI enclave Plan of Action and Milestones (POA&M) requirements and ensure mitigation within expected deadlines.
Review monitoring reports, findings, and escalations, providing feedback and quality assurance for consistent, defensible results.
Supervise staff by assigning and prioritizing work, setting expectations, providing guidance and feedback, conducting performance evaluations, coaching and supporting professional development, and approving schedules and leave.
Analyze research awards and contracts to identify security requirements, and respond to sponsor surveys and questionnaires concerning CUI and cybersecurity compliance.
Facilitate development of Technology Control Plans and liaise among investigators, local IT support, and Enterprise Technology as needed.
Coordinate researcher onboarding and access control for controlled data with program partners.
Monitor and analyze security alerts, report irregularities to the Information Security Office, and coordinate controlled research incident response.
Maintain accurate and current Supplier Risk Management System documentation supporting CMMC and SPRS scores.
Develop and implement controlled research outreach, training, and guidance.