Cybersecurity Compliance Analyst

About the role

The (Cybersecurity Compliance Analyst) Sr. IT & Risk Mgmt Analyst is responsible for planning, coordinating, and executing hands-on cybersecurity solutions to a wide range of small and medium-sized manufacturers across the State of Texas. This role works closely with central UTA units in Information Technology, Information Security, Research, Legal, Contracts, Procurement, as well as external vendors to implement controls, track remediation efforts, and maintain accurate compliance documentation for TMAC’s customers.

Responsibilities

• Work with TMAC customers to help them create a governance model as required by NIST SP 800 171, CMMC, as well as other federal and state cybersecurity frameworks.
• Aid in the creation of policies, processes, and tools by which the cybersecurity programs of TMAC customers can be managed and measured against.
• Develop and maintain cybersecurity workplans for TMAC customers that are aligned with their strategic interests; drafting and/or reviewing documentation as well as maintaining evidence repositories for audit readiness.
• Serve as a Cybersecurity Compliance Analyst for operational cybersecurity consulting and implementations for TMAC and TMAC customers.
• Develop, maintain, and execute compliance roadmaps, including timelines, resource needs, and milestones.
• Coordinate statewide TMAC efforts with regional centers and partners concerning cybersecurity; ensuring alignment and effective delivery of services.
• Perform site visits, conduct assessments, prepare proposals and contracts, and sell cybersecurity projects.
• Conduct cybersecurity assessments, develop strategic plans on behalf of TMAC customers to comply or maintain compliance based on related regulations.
• Lead internal self-assessments, readiness reviews and the coordination of evidence presentation, as well as findings and remediation responses.
• May serve as a primary interface for auditors.
• Manage the preparation and presentation of TMAC customers’ governance and compliance management reports, key performance metrics, scorecards, and briefings as required.
• Support TMAC customers to use continuous monitoring, scoring and grading metrics to make information security investment decisions to address persistent or compliance issues.
• Ensure TMAC customers have a cybersecurity scorecard, including but not limited to system-level health, operational defensive effectiveness, and employee training.
• Assist with other regulatory compliance requirements for UTA and TMAC customers.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or Cybersecurity and (3) three years of experience, preferably in cybersecurity program or project management, IT governance, information security or security risk assessment or (7) years of an equivalent combination of education and experience.
• Experience working with CMMC, NIST 800 171, DFARS, or similar frameworks.

Preferred Qualifications

• CMMC credentials (CCP, Registered Practitioner, etc.).
• Certifications such as PMP, CISSP, CAP, or CISA.
• Experience supporting third party audits (C3PAO, ISO, SOC, FedRAMP).
• Familiarity with Controlled Unclassified Information (CUI) requirements.
• Experience preparing audit documentation such as Incident Response Plans (IRP), Systems Security Plans (SSP), and Plan of Action and Milestones (POA&M).

Skills & Abilities

• Strong program and project management capabilities.
• Ability to lead without direct authority.
• Excellent communication and stakeholder coordination.
• Risk identification and problem solving.
• Attention to detail and audit readiness.

Purpose of Position

The (Cybersecurity Compliance Analyst) Sr. IT & Risk Mgmt Analyst is responsible for planning, coordinating, and executing hands-on cybersecurity solutions to a wide range of small and medium-sized manufacturers across the State of Texas. As an advisor, this role will be working with, in and around the areas of manufacturing, distribution, logistics, construction, health care, and government (including academia).

Pay

The annual salary for this position ranges from $107,900 to $126,000. The final offer will be commensurate with the candidate’s relevant experience and qualifications.

Schedule

Monday through Friday; 8:00am through 5:00pm. Working Conditions: 10% travel. Requires occasional evening or weekend hours. Hybrid work environment (remote & office).