Senior Enterprise GRC & InfoSec Analyst

UT Southwestern Medical Center; Dallas (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

UT Southwestern Medical Center seeks a Senior Governance Risk Compliance Analyst to lead information security governance, risk management, and compliance for the Texas Behavioral Health Center program. This role applies NIST, HIPAA, PCI standards and coordinates enterprise assessments and remediation with cross-functional teams.

The candidate will have 8+ years of governance experience, a BS in CS/IT, and professional certifications.

Qualifications

• Bachelor's degree in computer science, information technology, or related field required.
• 8+ years of progressively responsible technology governance experience.
• Experience with security governance, risk management and regulatory compliance.

Responsibilities

• Risk Management: Implements established risk frameworks for the Information Security program.
• Risk Assessments: Establishes formal risk assessment frameworks including third-party/vendor risk.
• Audit & Compliance: Tracks audit findings and coordinates creation of audit deliverables to ensure compliance.
• Metrics, KPIs and Reporting: Develops metrics and KPIs for program maturity and reporting.
• Program Governance: Assists with creation and management of program governance.
• Interfaces with departments, IS, third-party vendors and business partners to identify risk and plan compliance.
• Performs other duties and stays up to date with regulatory changes and security practices.

Skills

GRC governance

Risk management

Regulatory compliance

Security frameworks

Vendor risk management

Education

Bachelor's degree in CS/IT or related field

Tools

Archer

Logic Manager

Optro

Job description

UT Southwestern Medical Center seeks a Senior Governance Risk Compliance Analyst to lead information security governance, risk management, and compliance for the Texas Behavioral Health Center program. This role applies NIST, HIPAA, PCI standards and coordinates enterprise assessments and remediation with cross-functional teams.

The candidate will have 8+ years of governance experience, a BS in CS/IT, and professional certifications.