Controlled Research Compliance Manager, Office of Research Support and Compliance

University of Texas at Austin•Austin, TX

11d•Hybrid

About The Position

The Controlled Research Compliance Manager supports The University of Texas at Austin’s controlled research program involving export-controlled information and Controlled Unclassified Information (CUI). The role leads operational development and oversight of the CUI compliance program, translates regulatory and sponsor requirements into repeatable workflows, and coordinates with researchers, Enterprise Technology, the Information Security Office, the Office of Sponsored Programs, and other program partners to support secure, compliant research. The manager serves as a CUI subject matter expert, oversees project onboarding and monitoring, helps maintain secure research environments, and coordinates audits, investigations, incident response, and remediation. The position also supervises staff and develops outreach, training, and guidance for the research community. The role is based in Austin and may involve occasional travel, weekend, overtime, and evening work.

Requirements

Bachelor's degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions.
At least 3 years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions.
U.S. citizenship or U.S. person status.
Strong organizational, problem-solving, and decision-making skills.
Exceptional attention to detail and ability to analyze complex data.
Demonstrated leadership ability, including motivating and developing others, establishing priorities, fostering collaboration, and leading a team toward organizational goals.
Excellent communication and interpersonal skills.
Ability to work collaboratively and maintain the integrity of secure research operations.
Relevant education and experience may be substituted as appropriate.

Nice To Haves

Master’s degree.
Knowledge of export controls, CUI requirements, and research security regulations.
Experience in cybersecurity, information security, research compliance, or secure data management.
Familiarity with risk management and data protection practices.
Familiarity with access control systems and secure facility procedures.
Familiarity with federal contracting terms and research compliance or security requirements.
Familiarity with a university research environment.

Responsibilities

Lead development and operation of the CUI compliance program, including its operating model, processes, tools, templates, forms, and workflows.
Translate regulatory and sponsor requirements into practical, repeatable compliance workflows and safeguards.
Plan and prioritize program projects, onboarding, monitoring cycles, and training; keep the Senior Director of Research Security informed of program status, metrics, risks, and significant findings.
Evaluate monitoring results, cycle times, workload, and stakeholder feedback to identify gaps and implement process improvements.
Serve as the primary liaison among researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs for CUI project onboarding and support.
Partner with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments and align security controls with CUI requirements.
Document and assess end-to-end processes, roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners.
Coordinate preparation for and response to CUI compliance audits and investigations; maintain program documentation and records concerning audits, incidents, and controlled research activities.
Oversee the design, implementation, and operation of CUI compliance forms and workflows in electronic systems, including Kuali and future platforms.
Monitor regulatory and sponsor requirements, including NIST SP 800-171 and CMMC, and recommend program updates based on emerging requirements and peer practices.
Provide authoritative guidance on CUI requirements, NIST SP 800-171, and CMMC to researchers, research administrators, and program partners; serve as a technical resource for the Compliance Monitor.
Design and refine monitoring rubrics and checklists for onboarded CUI projects and evaluate monitoring processes and tools for consistency and program integrity.
Conduct regular monitoring reviews of CUI projects to verify compliance with Technology Control Plans and System Security Plans, coordinating with program partners and documenting reviews.
Monitor CUI enclave Plans of Action and Milestones (POAMs) and ensure mitigation within expected deadlines.
Review monitoring reports, findings, and escalations, providing feedback and quality assurance.
Supervise staff by assigning and prioritizing work, setting expectations, providing guidance and feedback, evaluating performance, supporting professional development, and approving schedules and leave.
Analyze research awards and contracts for security requirements and respond to sponsor surveys and questionnaires about CUI and cybersecurity compliance.
Facilitate development of Technology Control Plans and coordinate among investigators, local IT support, and Enterprise Technology as needed.
Coordinate researcher onboarding and access control for controlled data with Controlled Research Support Program partners.
Monitor and analyze security alerts, report irregularities to the Information Security Office, and coordinate controlled research incident response.
Maintain accurate Supplier Risk Management System documentation supporting CMMC and SPRS scores.
Develop and implement outreach, training, and guidance on controlled research.