Senior GRC Analyst: Security & Compliance Lead

University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

PPO medical plan

Paid Time Off

Retirement program

Paid parental leave

Wellness programs

Tuition reimbursement

Job summary

UT Southwestern Medical Center in Dallas seeks a Senior Governance Risk Compliance Analyst to lead enterprise security governance, risk management and regulatory compliance initiatives at the Texas Behavioral Health Center project. This role partners with IT, clinical and administrative teams to implement risk frameworks (HIPAA, NIST, CIS), conduct third-party risk assessments and oversee audits.

The ideal candidate has a Bachelor's in CS/IT and at least eight years of governance experience,

Qualifications

• Bachelor's degree in computer science, information technology, or related field.
• 8 years of progressively responsible technology governance experience; substitution allowed.
• Experience establishing information security frameworks (e.g., CIS, NIST, HIPAA, PCI).

Responsibilities

• Implements risk frameworks for the Information Security program.
• Operates formal security risk assessment frameworks including third-party risk.
• Tracks audit findings and ensures compliance with policies and standards.
• Develops metrics and KPIs for program maturity and reporting.
• Supports program governance and cross-departmental collaboration.
• Engages with vendors and partners to maintain ongoing compliance.

Skills

Information Security Governance

Risk Management

Audit & Compliance

GRC Tools (Archer)

GRC Tools (Logic Manager)

GRC Tools (Optro)

Regulatory Compliance

Education

Bachelor's Degree in CS/IT or related

Tools

Archer

Logic Manager

Optro

Job description

UT Southwestern Medical Center in Dallas seeks a Senior Governance Risk Compliance Analyst to lead enterprise security governance, risk management and regulatory compliance initiatives at the Texas Behavioral Health Center project. This role partners with IT, clinical and administrative teams to implement risk frameworks (HIPAA, NIST, CIS), conduct third-party risk assessments and oversee audits.

The ideal candidate has a Bachelor's in CS/IT and at least eight years of governance experience,