Controlled Research Compliance Manager, Office of Research Support and Compliance

Department: Office of Research Support and Compliance | Location: Austin, TX | Schedule: 40 hours/week, Exempt (FLSA) | Start: Immediately | Duration: Expected to continue

About the role

The Office of Research Support and Compliance (ORSC) at The University of Texas at Austin ensures all university research complies with applicable laws, regulations, and policies. ORSC educates and supports the research community on human subjects research (IRB), animal research (IACUC), biohazardous agents and recombinant/synthetic nucleic acids (IBC), financial conflict of interest (FCOI), research security and export controls, and research integrity education. ORSC sits within the Office of the Vice President for Research.

This position leads the university’s controlled research program involving export-controlled information and Controlled Unclassified Information (CUI). The role emphasizes regulatory compliance, oversight of CUI research activities, and coordination with stakeholders to ensure secure and compliant research practices.

Responsibilities

CUI Program Oversight

• Lead operational CUI compliance program development, including scoping the operating model and designing/implementing processes and tools.
• Translate regulatory and sponsor requirements into practical, repeatable workflows that enable research while maintaining required safeguards.
• Develop tools and forms to support compliance operations (e.g., TCP templates, personnel onboarding forms, monitoring checklists).
• Plan and prioritize program work, including project tracking, onboarding, monitoring cycles, and training.
• Keep the Senior Director of Research Security informed of program status, metrics, risks, and significant findings.
• Conduct continuous quality improvement and efficiency assessments by evaluating monitoring results, cycle times, workload, and stakeholder feedback to identify process gaps and implement improvements.
• Serve as primary liaison between researchers, Enterprise Technology, the Information Security Office, and the Office of Sponsored Programs to facilitate effective CUI project onboarding and support secure research practices.
• Partner with Enterprise Technology and the Information Security Office to design, implement, and maintain secure research environments, align system security controls with CUI requirements, and coordinate on assessments, incident response, and remediation.
• Develop and document end-to-end processes defining roles, handoffs, and timelines among the Compliance Monitor, researchers, and program partners; periodically assess for efficiency.
• Collaborate with partner units to coordinate program preparation for and response to audits and investigations related to CUI compliance.
• Maintain program-level documentation and records related to compliance audits, incidents, and controlled research activities.
• Provide oversight of CUI compliance program forms and workflows in electronic systems (e.g., Kuali) and future support platforms.
• Scan the regulatory and sponsor environment (NIST SP 800-171, CMMC, emerging trends, peer-institution practices) and recommend program and process updates.
• Serve as CUI subject matter expert, providing authoritative guidance on CUI requirements, NIST SP 800-171, and CMMC to researchers, research administrators, and program partners; act as technical resource for the Compliance Monitor.

Controlled Research Support Compliance Monitoring

• Design and continuously refine a comprehensive monitoring rubric and checklist for onboarded CUI projects.
• Continually evaluate monitoring processes and tools to ensure consistency, compliance, and overall program integrity.
• Conduct systematic monitoring reviews of CUI projects at regular intervals and in collaboration with controlled research support program partners to verify compliance with Technology Control Plans and System Security Plans; ensure proper documentation.
• Continually monitor CUI enclave requirements relating to POAMs and ensure mitigation within expected deadlines.
• Review monitoring reports, findings, and escalations, providing feedback and quality assurance to ensure consistent, defensible results.

Supervision

• Supervise staff: assign and prioritize work, set performance expectations, provide guidance and feedback, conduct performance evaluations, provide coaching and professional development, approve schedules and leave.

Operational and Security Support

• Analyze research awards and contracts to identify security requirements.
• Respond to sponsor surveys and questionnaires relating to CUI and cybersecurity compliance.
• Facilitate development of Technology Control Plans, serving as liaison between investigators, local IT support, and Enterprise Technology.
• Coordinate onboarding and access control for researchers working with controlled data in collaboration with Controlled Research Support Program partners.
• Monitor and analyze security alerts; report irregularities to the Information Security Office and coordinate controlled research incident response.
• Ensure documentation in the Supplier Risk Management System supporting CMMC and SPRS scores remains current and accurate.
• Develop and implement outreach, training, and guidance on controlled research.

Requirements

• Bachelor’s degree in Information Management, Cybersecurity, Information Security, Computer Science, or a related field, with demonstrated experience in cybersecurity, information security, risk management, or related compliance functions.
• 3+ years of professional experience in information security, cybersecurity, risk management, regulatory compliance, compliance monitoring, or related oversight functions.
• U.S. citizenship or U.S. person status.
• Strong organizational, problem-solving, and decision-making skills.
• Exceptional attention to detail and