Controlled Research Compliance Manager, Office of Research Support and Compliance

Job Posting Title:

Controlled Research Compliance Manager, Office of Research Support and Compliance ----

Hiring Department:

Office of Research Support and Compliance ----

Position Open To:

All Applicants ----

Weekly Scheduled Hours:

40 ----

FLSA Status:

Exempt from FLSA ----

Earliest Start Date:

Immediately ----

Position Duration:

Expected to Continue ----

Location:

AUSTIN, TX ----

Job Details:

General Notes

The Office of Research Support and Compliance (ORSC) at The University of Texas at Austin functions to ensure that all research conducted at the University is in compliance with applicable laws, regulations, and University policies. The ORSC educates and supports the University research community with regulatory guidance concerning human subjects research (Institutional Review Board), animal research (Institutional Animal Care and Use Committee), use of biohazardous agents and use of recombinant or synthetic nucleic acids (Institutional Biosafety Committee), financial conflict of interest in research (FCOI), research security and export controls, and research integrity education. The Office of Research Support and Compliance is within the Office of the Vice President for Research.

UT Austin offers a competitive benefits package that includes:

• •100% employer-paid basic medical coverage
• •Retirement contributions
• •Paid vacation and sick time
• •Paid holidays
• •Fully remote

Please visit our Human Resources (HR) website to learn more about the total benefits offered.

Purpose

The University of Texas at Austin is seeking a detail-oriented and experienced Controlled Research Compliance Manager to support the university’s controlled research program involving export-controlled and Controlled Unclassified Information (CUI). This role emphasizes regulatory compliance, oversight of CUI research activities, and coordination with stakeholders to ensure secure and compliant research practices.

Responsibilities

CUI Program Oversight

• •Lead the operational CUI compliance program development, including scoping of the CUI compliance program's operating model and design and implementation of processes, and tools. Translate regulatory and sponsor requirements into practical, repeatable workflows that enable research while maintaining required safeguards. Develop tools and forms to support compliance operations, including, but not limited to, TCP templates, personnel onboarding forms, and monitoring checklists.
• •Plan and prioritize program work, including project tracking, project onboarding, monitoring cycles, and training. Keep the Senior Director of Research Security informed of program status, metrics, risks, and significant findings.
• •Conduct continuous quality improvement and efficiency assessments by evaluating monitoring results, cycle times, workload, and partner and stakeholder feedback to identify process gaps and implement improvements.
• •Serve as the program's primary liaison between researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs to facilitate effective CUI project onboarding and support secure research practices.
• •Partner closely with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments, align system security controls with CUI requirements, and coordinate on assessments, incident response, and remediation.
• •Develop and document end-to-end processes that define roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners, and periodically assess them for efficiency.
• •Collaborate with partner units to coordinate the program's preparation for and response to audits and investigations related to CUI compliance.
• •Maintain program-level documentation and records related to compliance audits, incidents, and controlled research activities.
• •Provide oversight to the design, implementation, and ongoing operations of CUI compliance program forms and workflows in electronic systems, including Kuali and future support platforms.
• •Scan the regulatory and sponsor environment, including NIST SP 800-171, CMMC, and other applicable requirements, along with emerging trends and peer-institution practices, and recommend program and process updates in response.
• •Serve as a CUI subject matter expert, providing authoritative guidance on CUI requirements, NIST SP 800-171, and CMMC to researchers, research administrators, and program partners, and serving as the technical resource for the Compliance Monitor.

Controlled Research Support Compliance Monitoring

• •Design and continuously refine a comprehensive monitoring rubric and checklist for onboarded CUI projects. Continually evaluate monitoring processes and tools to ensure consistency, compliance, and overall program integrity.
• •Conduct systematic monitoring reviews of CUI projects at regular intervals and in collaboration with controlled research support program partners to verify compliance with Technology Control Plans and System Security Plans. Ensure proper documentation of these reviews.
• •Continually monitor CUI enclave requirements relating to POAMs and ensure mitigation within expected deadlines.
• •Review monitoring reports, findings, and escalations, providing feedback and quality assurance to ensure consistent, defensible results.

Supervision

Supervise staff, including assigning and prioritizing work, setting performance expectations, providing guidance and feedback, conducting performance evaluations, providing coaching and professional development, and approving schedules and leave.

Operational and Security Support

• •Analyze research awards and contracts to identify security requirements. Respond to sponsor surveys and questionnaires relating to CUI and cybersecurity compliance.
• •Facilitate development of Technology Control Plans, serving as a liaison and communication conduit between investigators, local IT support, and Enterprise Technology, as needed.
• •Coordinate onboarding and access control for researchers working with controlled data in collaboration with Controlled Research Support Program partners.
• •Monitor and analyze security alerts; report irregularities to the Information Security Office and coordinate controlled research incident response.
• •Ensure documentation in the Supplier Risk Management System supporting CMMC and SPRS scores remains current and accurate.
• •Develop and implement outreach, training, and guidance on controlled research.

Required Qualifications

• •Bachelor's degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions.
• •3+ years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions.
• •U.S. citizenship or U.S. person status.
• •Strong organizational, problem-solving, and decision-making skills.
• •Exceptional attention to detail and ability to analyze complex data.
• •Demonstrated leadership skills, including the ability to motivate and develop others, establish priorities, foster collaboration, and effectively lead a team toward organizational goals.
• •Excellent communication and interpersonal skills.
• •Ability to work collaboratively and maintain integrity of secure research operations.

Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

• •Master’s degree preferred.
• •Knowledge of export controls, CUI requirements, and research security regulations.
• •Experience in cybersecurity, information security, research compliance, or secure data management.
• •Familiarity with risk management, and data protection practices.
• •Familiarity with access control systems and secure facility procedures.
• •Familiarity with federal contracting terms, research compliance or se