Senior GRC Analyst — Security Governance & Risk Lead

The University of Texas Southwestern Medical Center; Dallas (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

UT Southwestern Medical Center in Dallas seeks a Senior Governance Risk Compliance Analyst to lead information security governance, risk management and regulatory compliance for the Texas Behavioral Health Center. The role shapes and operationalizes risk frameworks to support patient data security and program integrity.

This position conducts enterprise security assessments, coordinates audits, and drives remediation with IT, clinical partners and vendors, ensuring alignment with HIPAA, Joint

Qualifications

• 8 years of progressively responsible technology governance experience.
• Experience establishing information security frameworks and aligning security controls.

Responsibilities

• Implements established risk frameworks for the Information Security program.
• Establishes formal security risk assessments including third-party risk and procurement.
• Tracks audit findings and ensures audit compliance with policies and standards.
• Develops metrics and KPIs for program maturity and reporting.
• Assists with program governance and cross-department collaboration.
• Keeps up with regulatory changes and evolving security controls.

Skills

GRC governance

Risk management

Information Security

Audits

Education

Bachelor’s Degree in CS/IT or related field

Tools

Archer

LogicManager

Optro

Job description

UT Southwestern Medical Center in Dallas seeks a Senior Governance Risk Compliance Analyst to lead information security governance, risk management and regulatory compliance for the Texas Behavioral Health Center. The role shapes and operationalizes risk frameworks to support patient data security and program integrity.

This position conducts enterprise security assessments, coordinates audits, and drives remediation with IT, clinical partners and vendors, ensuring alignment with HIPAA, Joint