Controlled Research Compliance Manager, Office of Research Support and Compliance

University of Texas at Austin•Austin, TX

1d•$90,000•Remote

About The Position

The Office of Research Support and Compliance (ORSC) at The University of Texas at Austin ensures research is conducted in compliance with applicable laws, regulations, and University policies. It educates and supports the research community on regulatory matters, including human and animal research, biosafety, financial conflicts of interest, research security and export controls, and research integrity education. ORSC is within the Office of the Vice President for Research. The Controlled Research Compliance Manager supports the University’s controlled research program involving export-controlled information and Controlled Unclassified Information (CUI). The role leads development and operation of the CUI compliance program, translates regulatory and sponsor requirements into practical workflows, and coordinates with researchers and campus partners to support secure and compliant research. The manager serves as a CUI subject matter expert, oversees monitoring and documentation, and supervises staff. The position is based in Austin, Texas, and is fully remote. It is scheduled for 40 hours per week, with an expected continuation. Occasional weekend, overtime, evening work, and travel may be required.

Requirements

Bachelor’s degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions. Relevant education and experience may be substituted as appropriate.
At least 3 years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions.
U.S. citizenship or U.S. person status.
Strong organizational, problem-solving, and decision-making skills.
Exceptional attention to detail and ability to analyze complex data.
Demonstrated leadership skills, including motivating and developing others, establishing priorities, fostering collaboration, and leading a team toward organizational goals.
Excellent communication and interpersonal skills.
Ability to work collaboratively and maintain the integrity of secure research operations.

Nice To Haves

Master’s degree.
Knowledge of export controls, CUI requirements, and research security regulations.
Experience in cybersecurity, information security, research compliance, or secure data management.
Familiarity with risk management and data protection practices.
Familiarity with access control systems and secure facility procedures.
Familiarity with federal contracting terms, research compliance, or security requirements.
Familiarity with a university research environment.

Responsibilities

Lead operational development of the CUI compliance program, including scoping its operating model and designing and implementing processes and tools.
Translate regulatory and sponsor requirements into repeatable workflows and develop compliance tools and forms, including Technology Control Plan templates, personnel onboarding forms, and monitoring checklists.
Plan and prioritize program work, including project tracking, onboarding, monitoring cycles, and training; keep the Senior Director of Research Security informed about program status, metrics, risks, and significant findings.
Assess monitoring results, cycle times, workload, and stakeholder feedback to identify process gaps and implement improvements.
Serve as the primary liaison among researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs for CUI project onboarding and secure research practices.
Partner with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments; align system security controls with CUI requirements; and coordinate assessments, incident response, and remediation.
Document end-to-end processes, roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners, and periodically assess process efficiency.
Coordinate with partner units on preparation for and response to CUI compliance audits and investigations.
Maintain program-level documentation and records relating to compliance audits, incidents, and controlled research activities.
Oversee the design, implementation, and ongoing operation of CUI compliance forms and workflows in electronic systems, including Kuali and future support platforms.
Monitor regulatory and sponsor requirements, including NIST SP 800-171 and CMMC, as well as emerging trends and peer-institution practices; recommend program and process updates.
Provide authoritative guidance on CUI requirements, NIST SP 800-171, and CMMC to researchers, research administrators, and program partners, and serve as a technical resource for the Compliance Monitor.
Design and continuously refine a monitoring rubric and checklist for onboarded CUI projects; evaluate monitoring processes and tools for consistency, compliance, and program integrity.
Conduct regular, systematic monitoring reviews of CUI projects with program partners to verify compliance with Technology Control Plans and System Security Plans, and document the reviews.
Monitor CUI enclave requirements relating to Plans of Action and Milestones (POAMs) and ensure mitigation within expected deadlines.
Review monitoring reports, findings, and escalations, providing feedback and quality assurance for consistent, defensible results.
Supervise staff by assigning and prioritizing work, setting performance expectations, providing guidance and feedback, conducting performance evaluations, coaching and supporting professional development, and approving schedules and leave.
Analyze research awards and contracts to identify security requirements, and respond to sponsor surveys and questionnaires concerning CUI and cybersecurity compliance.
Facilitate development of Technology Control Plans and serve as a liaison among investigators, local IT support, and Enterprise Technology as needed.
Coordinate researcher onboarding and access control for controlled data with Controlled Research Support Program partners.
Monitor and analyze security alerts, report irregularities to the Information Security Office, and coordinate controlled research incident response.
Keep Supplier Risk Management System documentation supporting CMMC and SPRS scores current and accurate.
Develop and implement outreach, training, and guidance on controlled research.