Director of Cybersecurity Governance, Risk and Compliance

Job Posting Title: Director of Cybersecurity Governance, Risk and Compliance ---- Hiring Department: Dell Medical School ---- Position Open To: All Applicants ---- Weekly Scheduled Hours: 40 ---- FLSA Status: Exempt from FLSA ---- Earliest Start Date: Immediately ---- Position Duration: Expected to Continue ---- Location: UT MAIN CAMPUS ---- Job Details: General Notes The Director of Cybersecurity Governance, Risk and Compliance leads the information security Governance, Risk and Compliance (GRC) program for UT Medicine and Dell Medical School. Reporting to the Deputy CISO, this role builds and operates a mature GRC function that enables the organization to assess, manage, and mitigate cybersecurity risk across a clinical, academic, and research environment on a path toward full hospital operations in 2030. Dell Medical School operates within UT Austin’s established enterprise security program, inheriting a baseline of policies, procedures, and tooling. This allows Dell Medical School’s cybersecurity governance program to focus on areas of risk specific to its clinical and research mission. Rather than rebuilding foundational controls, this role concentrates on assessing risk and developing security policies, standards, and procedures specific to healthcare delivery, clinical research, and regulatory compliance. Beyond GRC, this role owns Dell Medical School’s incident response coordination capability for events that exceed UT Austin’s initial response scope, including driving communication, escalation, and decision-making across clinical and business stakeholders through resolution. This includes maintaining business continuity and disaster recovery plans for clinical and business systems where Dell Medical School bears primary responsibility. Purpose The Director of Cybersecurity Governance, Risk and Compliance provides strategic leadership for Dell Medical School’s information security governance, risk management, and compliance program. This position develops and executes GRC strategy, evaluates cybersecurity risk, establishes healthcare- and research-specific security governance, oversees regulatory compliance, and provides executive-level reporting on organizational risk posture and program maturity. Operating within UT Austin’s federated security environment, the Director partners with technology, clinical, research, legal, privacy, audit, and compliance stakeholders to manage cybersecurity risk while supporting Dell Medical School’s continued