Governance Risk Compliance Analyst II

%3Cp%3E%3Cstrong%3EWHY UT SOUTHWESTERN?%3C/strong%3E%3Cbr%3EWith over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and

benefits

for our valued employees. Ranked as the No. 1 hospital in Dallas-Fort Worth according to %3Ci%3EU.S. News %26amp; World Report%3C/i%3E, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive

benefits

package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you%27ll discover a culture of teamwork, professionalism, and a rewarding career!%26nbsp;%3Cbr%3E%3Cbr%3E%3Cstrong%3EJOB SUMMARY%3C/strong%3E%3Cbr%3ESupports the development, implementation, and operationalization of Information Security governance, risk, and compliance (GRC) functions to ensure alignment with established security frameworks, regulatory requirements, and institutional policies. Assists in managing information security risks and contributes to maintaining compliance across the organization. %26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EIdeal Candidate%5C:%3C/strong%3E%3Cbr%3EThe ideal candidate will have %3Cstrong%3E%3Cu%3Eprofessional experience%3C/u%3E%3C/strong%3E in Information Security Governance, Risk, and Compliance (GRC) and a strong understanding of core security and risk management principles. While specialized experience earlier in a candidate’s career is welcomed, this position requires a well-rounded GRC professional who is comfortable working across a broad range of

responsibilities

. Candidates should demonstrate the ability to apply their experience to diverse governance, risk, compliance, and information security needs%3Cbr%3E%3Cbr%3E%26nbsp;%3C/p%3E%3Cp%3E%3Cstrong%3EBENEFITS%3C/strong%3E%3Cbr%3EUT Southwestern is proud to offer a competitive and comprehensive

benefits

package to eligible employees. Our

benefits

are designed to support your overall wellbeing, and include%5C:%3C/p%3E%3Cul%3E%3Cli%3EPPO medical plan, available day one at no cost for full-time employee-only coverage%3C/li%3E%3Cli%3E100% coverage for preventive healthcare-no copay%3C/li%3E%3Cli%3EPaid Time Off, available day one%3C/li%3E%3Cli%3ERetirement Programs through the Teacher Retirement System of Texas (TRS)%3C/li%3E%3Cli%3EPaid Parental Leave Benefit%3C/li%3E%3Cli%3EWellness programs%3C/li%3E%3Cli%3ETuition Reimbursement%3C/li%3E%3Cli%3EPublic Service Loan Forgiveness (PSLF) Qualified Employer%3C/li%3E%3Cli%3E%3Ca href=%22http%5C://jobs.utsouthwestern.edu/

benefits

/#top%22 target=%22_blank%22%3ELearn more about these and other UTSW employee

benefits

!%3C/a%3E%3C/li%3E%3C/ul%3E%3Cp%3E%3Cbr%3E%3Cbr%3E%3Cstrong%3EEXPERIENCE AND EDUCATION%3C/strong%3E%3Cbr%3E%3Cbr%3E%3Cstrong%3ERequired%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3E%3Cstrong%3EEducation%3C/strong%3E%3Cbr%3EBachelor%27s Degree in Computer Science, Information Technology, Cybersecurity, or related field.%26nbsp;%3Cbr%3E%26nbsp;%3C/li%3E%3C/ul%3E%3Cul%3E%3Cli%3E%3Cstrong%3EExperience%3C/strong%3E%3Cbr%3E3-5 years of experience in information security, IT risk, compliance, or governance roles%26nbsp;%3Cbr%3E%26nbsp;%3C/li%3E%3C/ul%3E%3Cp%3E%3Cstrong%3EPreferred%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3E%3Cstrong%3ELicenses and Certifications%3C/strong%3E%3Cbr%3ECISA (Certified Information Systems Auditor)%26nbsp;%3Cbr%3ECRISC (Certified in Risk and Information Systems Control)%26nbsp;%3Cbr%3ECISM (Certified Information Security Manager)%26nbsp;%3Cbr%3ESecurity+ (for foundational knowledge)%26nbsp;%3Cbr%3EISO 27001 Lead Implementer / Lead Auditor%26nbsp;%3Cbr%3E%26nbsp;%3C/li%3E%3C/ul%3E%3Cp%3E%3Cbr%3E%3Cstrong%3EJOB DUTIES%3C/strong%3E%3C/p%3E%3Cul%3E%3Cli%3ESupports implementation and maintenance of risk management frameworks within the Information Security program.%3C/li%3E%3Cli%3EPerforms security risk assessments for systems, third-party vendors, and technology procurement (e.g., ISAC).%3C/li%3E%3Cli%3EDocuments findings and supports remediation tracking.%3C/li%3E%3Cli%3EAssists in tracking audit findings, coordinating responses, and supporting compliance with regulatory and internal requirements (HIPAA, NIST, CIS, etc.).%3C/li%3E%3Cli%3EContributes to development of security metrics, KPIs, and reporting for operational and management visibility.%3C/li%3E%3Cli%3ESupports governance processes including documentation, standards, and policy alignment.%3C/li%3E%3Cli%3ECollaborates with technical teams, business units, and third parties to identify risks and support compliance efforts.%3C/li%3E%3Cli%3EAssists with maintaining risk registers, control inventories, and GRC tool updates.%3C/li%3E%3Cli%3ESupports Information Security initiatives and stays current with regulatory and security best practices.%3C/li%3E%3Cli%3EPerforms other duties as assigned.%3C/li%3E%3C/ul%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%26nbsp;%3C/span%3E%3C/p%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%3Cstrong%3EKnowledge, Skills and Abilities%3C/strong%3E%3C/span%3E%3C/p%3E%3Cul%3E%3Cli%3EStrong analytical and problem-solving skills%3C/li%3E%3Cli%3EGood communication and documentation skills%3C/li%3E%3Cli%3EUnderstanding of risk management and compliance concepts%3C/li%3E%3Cli%3EAbility to work with cross-functional teams%3C/li%3E%3Cli%3EAttention to detail and ability to manage multiple tasks%3C/li%3E%3C/ul%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%26nbsp;%3C/span%3E%3C/p%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%3Cstrong%3EPHYSICAL REQUIREMENTS/WORKING CONDITIONS%3C/strong%3E%3C/span%3E%3C/p%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%26nbsp;%3C/span%3E%3C/p%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%3Cstrong%3EPhysical Requirements%3C/strong%3E%3C/span%3E%3C/p%3E%3Cul%3E%3Cli%3ETalking%3C/li%3E%3C/ul%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%26nbsp;%3C/span%3E%3C/p%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%3Cstrong%3EWorking Conditions%3C/strong%3E%3C/span%3E%3C/p%3E%3Cul%3E%3Cli%3EOffice Setting%3C/li%3E%3C/ul%3E%3Cp style=%22font-size%5C:9pt;margin-bottom%5C:0pt;margin-top%5C:0pt;%22%3E%3Cspan style=%22font-family%5C:Verdana;%22%3E%26nbsp;%3C/span%3E%3C/p%3E%3Cp%3E%3Cstrong%3ESalary Information%3C/strong%3E%3Cbr%3ESalary is commensurate with education, skills, and relevant experience.%3Cbr%3E%3Cbr%3E%3Cstrong%3ESECURITY AND EEO STATEMENT%3C/strong%3E%3Cbr%3E%3Cbr%3E%3Cstrong%3ESecurity%3C/strong%3E%3Cbr%3EThis position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.%3Cbr%3E%3Cbr%3E%3Cstrong%3EEEO%3C/strong%3E%3Cbr%3EUT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.%3Cbr%3E%26nbsp;%3C/p%3E