Governance Risk Compliance Analyst II

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY
Supports the development, implementation, and operationalization of Information Security governance, risk, and compliance (GRC) functions to ensure alignment with established security frameworks, regulatory requirements, and institutional policies. Assists in managing information security risks and contributes to maintaining compliance across the organization.

Ideal Candidate:
The ideal candidate will have professional experience in Information Security Governance, Risk, and Compliance (GRC) and a strong understanding of core security and risk management principles. While specialized experience earlier in a candidate’s career is welcomed, this position requires a well-rounded GRC professional who is comfortable working across a broad range of responsibilities. Candidates should demonstrate the ability to apply their experience to diverse governance, risk, compliance, and information security needs

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education
  Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.
  

• Experience
  3-5 years of experience in information security, IT risk, compliance, or governance roles
  

Preferred

• Licenses and Certifications
  CISA (Certified Information Systems Auditor)
  CRISC (Certified in Risk and Information Systems Control)
  CISM (Certified Information Security Manager)
  Security+ (for foundational knowledge)
  ISO 27001 Lead Implementer / Lead Auditor
  

JOB DUTIES

• Supports implementation and maintenance of risk management frameworks within the Information Security program.
• Performs security risk assessments for systems, third-party vendors, and technology procurement (e.g., ISAC).
• Documents findings and supports remediation tracking.
• Assists in tracking audit findings, coordinating responses, and supporting compliance with regulatory and internal requirements (HIPAA, NIST, CIS, etc.).
• Contributes to development of security metrics, KPIs, and reporting for operational and management visibility.
• Supports governance processes including documentation, standards, and policy alignment.
• Collaborates with technical teams, business units, and third parties to identify risks and support compliance efforts.
• Assists with maintaining risk registers, control inventories, and GRC tool updates.
• Supports Information Security initiatives and stays current with regulatory and security best practices.
• Performs other duties as assigned.

Knowledge, Skills and Abilities

• Strong analytical and problem-solving skills
• Good communication and documentation skills
• Understanding of risk management and compliance concepts
• Ability to work with cross-functional teams
• Attention to detail and ability to manage multiple tasks

PHYSICAL REQUIREMENTS/WORKING CONDITIONS

Physical Requirements

• Talking

Working Conditions

• Office Setting

Salary Information
Salary is commensurate with education, skills, and relevant experience.

SECURITY AND EEO STATEMENT

Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

EEO
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY
Supports the development, implementation, and operationalization of Information Security governance, risk, and compliance (GRC) functions to ensure alignment with established security frameworks, regulatory requirements, and institutional policies. Assists in managing information security risks and contributes to maintaining compliance across the organization.

Ideal Candidate:
The ideal candidate will have professional experience in Information Security Governance, Risk, and Compliance (GRC) and a strong understanding of core security and risk management principles. While specialized experience earlier in a candidate’s career is welcomed, this position requires a well-rounded GRC professional who is comfortable working across a broad range of responsibilities. Candidates should demonstrate the ability to apply their experience to diverse governance, risk, compliance, and information security needs

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education
  Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or related field.
  

• Experience
  3-5 years of experience in information security, IT risk, compliance, or governance roles
  

Preferred

• Licenses and Certifications
  CISA (Certified Information Systems Auditor)
  CRISC (Certified in Risk and Information Systems Control)
  CISM (Certified Information Security Manager)
  Security+ (for foundational knowledge)
  ISO 27001 Lead Implementer / Lead Auditor
  

JOB DUTIES

• Supports implementation and maintenance of risk management frameworks within the Information Security program.
• Performs security risk assessments for systems, third-party vendors, and technology procurement (e.g., ISAC).
• Documents findings and supports remediation tracking.
• Assists in tracking audit findings, coordinating responses, and supporting compliance with regulatory and internal requirements (HIPAA, NIST, CIS, etc.).
• Contributes to development of security metrics, KPIs, and reporting for operational and management visibility.
• Supports governance processes including documentation, standards, and policy alignment.
• Collaborates with technical teams, business units, and third parties to identify risks and support compliance efforts.
• Assists with maintaining risk registers, control inventories, and GRC tool updates.
• Supports Information Security initiatives and stays current with regulatory and security best practices.
• Performs other duties as assigned.

Knowledge, Skills and Abilities

• Strong analytical and problem-solving skills
• Good communication and documentation skills
• Understanding of risk management and compliance concepts
• Ability to work with cross-functional teams
• Attention to detail and ability to manage multiple tasks

PHYSICAL REQUIREMENTS/WORKING CONDITIONS

Physical Requirements

• Talking

Working Conditions

• Office Setting

Salary Information
Salary is commensurate with education, skills, and relevant experience.

SECURITY AND EEO STATEMENT

Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

EEO
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

3000 Pegasus Park (3000P)
3000 Pegasus Park
Dallas, 75247