GRC Analyst

This role will support UTA’s Governance, Risk, and Compliance (GRC) program by conducting third-party vendor risk assessments, managing security exceptions and risk acceptances, maintaining risk and compliance documentation, and supporting audit and reporting activities. The individual will partner closely with business, research, and IT stakeholders to assess and document risk across the organization. A key focus of the role will be supporting UTA’s ongoing implementation and expansion of ServiceNow IRM, leveraging the Compliance, Risk, and Audit modules to mature risk management processes, automate workflows, and strengthen overall governance and compliance efforts.

Must Haves: * 3-5 years of experience in GRC, cybersecurity, risk management, or compliance. * Experience performing third-party/vendor risk assessments. * Experience managing security exceptions and risk acceptance processes. * Hands-on experience with ServiceNow IRM/ISN (implementation, administration, or configuration). * Knowledge of security frameworks such as NIST, ISO 27001, CIS Controls, or SOC 2. * Strong communication skills and ability to work with both technical and non-technical stakeholders. * Experience coordinating across security, IT, procurement, legal, and business teams. * Higher education, public sector, or state government experience. * Familiarity with FERPA and protection of student data. * Experience supporting research environments and research data governance. * Experience supporting ISO 27001, SOC 2, HIPAA, or PCI compliance initiatives. * ServiceNow workflow development, reporting, and automation experience. * Professional certifications such as Security+, CISA, CRISC, CISM, CGRC, or CISSP.