Senior AI Governance Risk Compliance Analyst

The University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

PPO medical plan

Paid Time Off

Retirement Programs

Job summary

The University of Texas Southwestern Medical Center seeks a Senior AI Governance Risk Compliance Analyst to support AI risk management within the Department of Information Security. The role develops and operationalizes governance, risk management functions, ensuring compliance with security controls, regulatory and legal requirements, policies and standards.

Leads enterprise-wide assessments and AI framework implementation across UT Southwestern environments.

Qualifications

• Bachelor's degree in computer science, information technology, or related field.
• 8 years of progressively responsible technology governance experience.
• Additional years of related experience may be substituted for degree.

Responsibilities

• Implements established risk frameworks for the Information Security program.
• Establishes and operationalizes formal security risk assessment frameworks for third-party and internal controls.
• Tracks audit findings and ensures regulatory and policy compliance.
• Develops metrics and KPIs for program maturity and reporting.
• Assists with program governance and cross-department collaboration.
• Identifies risk areas and develops remediation plans.

Skills

Risk Management

Risk Assessment

Audit & Compliance

Governance

Education

Bachelor's degree in computer science, IT, or related field

Tools

Archer

LogicManager

Optro

Job description

Job Description - Senior AI Governance Risk Compliance Analyst (968575)

Job Description

Senior AI Governance Risk Compliance Analyst - ( 968575 )

Description

WHY UT SOUTHWESTERN?

With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report , we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY

This position will support AI risk management within the Department of Information Security. This role develops, implements and operationalizes the Information Security governance and risk management functions to ensure the Program is compliant with established security controls frameworks, regulatory and legal requirements, policies and standards. Ensures that Information Security risk to the institution is appropriately managed. Subject matter expert on mature security governance structures and processes, risk management processes (enterprise and third party), and contractual, regulatory compliance requirements. Leads and executes enterprise-wide security assessments and strategic projects to mature the Program. This position focuses on AI governance, risk, and compliance, leading the design and implementation of an AI framework to evaluate, validate, and monitor artificial intelligence models across all UTSW environments in accordance with state regulations and institutional standards.

BENEFITS

UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Education
  Bachelor's Degree in computer science, information technology, or related field
  
• Experience
  8 years of progressively responsible technology governance experience
  Additional years of directly related experience may be substituted for stated degree on a year for year basis.
  

Preferred

Experience

Possession of an industry certification, such as CRISC, CGRC, AIGP, CISAProgressively responsible experience establishing Information Security frameworks and aligning security controls (e.g. CIS, NIST, HIPAA, PCI), framework and Control gap analysis and remediation, project management, threat and risk modeling, building and maintaining a risk register.

Ability to respond to and audits, and leverage GRC tools (e.g. Archer, Logic Manager, Optro).

Experience creating framework based risk assessments and consulting with technical and non technical staff to implement and advance GRC initiatives based on best practices.

JOB DUTIES

• Risk Management: Implements established risk frameworks for the Information Security program.
• Risk Assessments: Establishes and operationalizes formal security risk assessment frameworks to quantify and qualify risk including for third-party vendor risk, technology procurement (ISAC) and internal security controls. Leads and executes enterprise-wide security assessments and strategic projects to mature the Program.
• Audit & Compliance: Tracks audit findings, coordinates creation of audit deliverables and ensures audit compliance. Ensures Information Security Program compliance with established security controls framework, and regulatory and legal requirements, policies and standards.
• Metrics, KPIs and Reporting: Develops metrics and KPIs for Information Security Program maturity and operational and executive reporting.
• Program Governance: Assists with creation and management of program governance.
• Interfaces with departments, Information Resources, third-party vendors, and business partners to identify areas of risk and assist with development of plans to establish and maintain ongoing compliance.
• Assists with various Information Security projects. Stays up to date with regulatory changes, modern technology & security controls and practices.
• Performs other duties as assigned.

SECURITY AND EEO STATEMENT

Security

Security This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

EEO

UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. In accordance with federal and state law, the University prohibits unlawful discrimination, including harassment, on the basis of: race; color; religion; national origin; gender, including sexual harassment; age; disability; citizenship; and veteran status. In addition, it is UT Southwestern policy to prohibit discrimination on the basis of sexual orientation, gender identity, or gender expression.

Copyright 2017.The University of Texas Southwestern Medical Center5323 Harry Hines Blvd., Dallas, Texas 75390Phone [phone]