Controlled Research Compliance Manager, Office of Research Support and Compliance

Job Posting Title: Controlled Research Compliance Manager, Office of Research Support and Compliance ---- Hiring Department: Office of Research Support and Compliance ---- Position Open To: All Applicants ---- Weekly Scheduled Hours: 40 ---- FLSA Status: Exempt from FLSA ---- Earliest Start Date: Immediately ---- Position Duration: Expected to Continue ---- Location: AUSTIN, TX ---- Job Details: General Notes The Office of Research Support and Compliance (ORSC) at The University of Texas at Austin functions to ensure that all research conducted at the University is in compliance with applicable laws, regulations, and University policies. The ORSC educates and supports the University research community with regulatory guidance concerning human subjects research (Institutional Review Board), animal research (Institutional Animal Care and Use Committee), use of biohazardous agents and use of recombinant or synthetic nucleic acids (Institutional Biosafety Committee), financial conflict of interest in research (FCOI), research security and export controls, and research integrity education. The Office of Research Support and Compliance is within the Office of the Vice President for Research. UT Austin offers a competitive benefits package that includes: 100% employer-paid basic medical coverage Retirement contributions Paid vacation and sick time Paid holidays Fully remote Please visit our Human Resources (HR) website to learn more about the total benefits offered. Purpose The University of Texas at Austin is seeking a detail-oriented and experienced Controlled Research Compliance Manager to support the university’s controlled research program involving export-controlled and Controlled Unclassified Information (CUI). This role emphasizes regulatory compliance, oversight of CUI research activities, and coordination with stakeholders to ensure secure and compliant research practices. Responsibilities CUI Program Oversight Lead the operational CUI compliance program development, including scoping of the CUI compliance program s operating model and design and implementation of processes, and tools. Translate regulatory and sponsor requirements into practical, repeatable workflows that enable research while maintaining required safeguards. Develop tools and forms to support compliance operations, including, but not limited to, TCP templates, personnel onboarding forms, and monitoring checklists. Plan and prioritize program work, including project tracking, project onboarding, monitoring cycles, and training. Keep the Senior Director of Research Security informed of program status, metrics, risks, and significant findings. Conduct continuous quality improvement and efficiency assessments by evaluating monitoring results, cycle times, workload, and partner and stakeholder feedback to identify process gaps and implement improvements. Serve as the program s primary liaison between researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs to facilitate effective CUI project onboarding and support secure research practices. Partner closely with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments, align system security controls with CUI requirements, and coordinate on assessments, incident response, and remediation. Develop and document end-to-end processes that define roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners, and periodically assess them for efficiency. Collaborate with partner units to coordinate the program s preparation for and response to audits and investigations related to CUI compliance. Maintain program-level documentation and records related to compliance audits, incidents, and controlled research activities. Provide oversight to the design, implementation, and ongoing operations of CUI compliance program forms and workflows in electronic systems, including Kuali and future support platforms. Scan the regulatory and sponsor environment, including NIST SP 800-171, CMMC, and other applicable requirements, along with emerging trends and peer-institution practices, and recommend program and process updates in response. Serve as a CUI subject matter expert, providing authoritative guidance on CUI requirements, NIST SP 800-171, and CMMC to researchers, research administrators, and program partners, and serving as the technical resource for the Compliance Monitor. Controlled Research Support Compliance Monitoring Design and continuously refine a comprehensive monitoring rubric and checklist for onboarded CUI projects. Continually evaluate monitoring processes and tools to ensure consistency, compliance, and overall program integrity. Conduct systematic monitoring reviews of CUI projects at regular intervals and in collaboration with controlled research support program partners to verify compliance with Technology Control Plans and System Security Plans. Ensure proper documentation of these reviews. Continually monitor CUI enclave requirements relating to POAMs and ensure mitigation within expected deadlines. Review monitoring reports, findings, and escalations, providing feedback and quality assurance to ensure consistent, defensible results. Supervision Supervise staff, including assigning and prioritizing work, setting performance expectations, providing guidance and feedback, conducting performance evaluations, providing coaching and professional development, and approving schedules and leave. Operational and Security Support Analyze research awards and contracts to identify security requirements. Respond to sponsor surveys and questionnaires relating to CUI and cybersecurity compliance. Facilitate development of Technology Control Plans, serving as a liaison and communication conduit between investigators, local IT support, and Enterprise Technology, as needed. Coordinate onboarding and access control for researchers working with controlled data in collaboration with Controlled Research Support Program partners. Monitor and analyze security alerts; report irregularities to the Information Security Office and coordinate controlled research incident response. Ensure documentation in the Supplier Risk Management System supporting CMMC and SPRS scores remains current and accurate. Develop and implement outreach, training, and guidance on controlled research. Required Qualifications Bachelor s degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions. 3 years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions. U.S. citizenship or U.S. person status. Strong organizational, problem-solving, and decision-making skills. Exceptional attention to detail and ability to analyze complex data. Demonstrated leadership skills, including the ability to motivate and develop others, establish priorities, foster collaboration, and effectively lead a team toward organizational goals. Excellent communication and interpersonal skills. Ability to work collaboratively and maintain integrity of secure research operations. Relevant education and experience may be substituted as appropriate. Preferred Qualifications Master’s degree preferred. Knowledge of export controls, CUI requirements, and research security regulations. Experience in cybersecurity, information security, research compliance, or secure data management. Familiarity with risk management, and data protection practices. Familiarity with access control systems and secure facility procedures. Familiarity with federal contracting terms, research compliance or security requirements. Familiarity with a university research environment. Salary Range $90,000 depending on qualifications Working Conditions Uniforms and/or personal protection equipment (furnished) May work around standard office conditions Repetitive use of a keyboard at a workstation Use of manual dexterity Climbing of stairs Lifting and moving Occasional weekend, overtime and evening work to meet deadlines Occasional travel Required Materials Please mark yes on the application for required materials. Failure to attach all additional materials listed may affect candidates being considered for the position. Resume/CV 3 work references with their contact information; at least one reference should be from a supervisor Letter of interest Important for applicants who are NOT current university employees or contingent workers: You will be prompted to submit your resume the first time you apply, then you will be provided an option to upload a new Resume for subsequent applications. Any additional Required Materials (letter of interest, references, etc.) will be uploaded in the Application Questions section; you will be able to multi-select additional files. Before submitting your online job application, ensure that ALL Required Materials have been uploaded. Once your job application has been submitted, you cannot make changes. Important for Current university employees and contingent workers: As a current university employee or contingent worker, you MUST apply within Workday by searching for Find UT Jobs. If you are a current University employee, log-in to Workday, navigate to your Worker Profile, click the Career link in the left hand navigation menu and then update the sections in your Professional Profile before you apply. This information will be pulled in to your application. The application is one page and you will be prompted to upload your resume. In addition, you must respond to the application questions presented to upload any additional Required Materials (letter of interest, references, etc.) that were noted above. ---- Employment Eligibility: Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval. ---- Retirement Plan Eligibility: The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length. ---- Background Checks: A criminal history background check will be required for finalist(s) under consideration for this position. ---- Equal Opportunity Employer: The University of Texas at Austin, as an equal opportunity/affirmative action employer , complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions. ---- Pay Transparency: The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. ---- Employment Eligibility Verification: If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university. ---- E-Verify: The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university’s company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following: E-Verify Poster (English and Spanish) [PDF] Right to Work Poster (English) [PDF] Right to Work Poster (Spanish) [PDF] ---- Compliance: Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031 . The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.