Cybersecurity and Compliance Senior Manager or Director, Texas Institute for Electronics

Job Posting Title:

Cybersecurity and Compliance Senior Manager or Director, Texas Institute for Electronics

----

Hiring Department:

Texas Institute for Electronics

----

Position Open To:

All Applicants

----

Weekly Scheduled Hours:

40

----

FLSA Status:

To Be Determined at Offer

----

Earliest Start Date:

Ongoing

----

Position Duration:

Expected to Continue

----

Location:

AUSTIN, TX

----

Job Details:

General Notes

About Us

The Texas Institute for Electronics (TIE) is a University of Texas at Austin-supported semiconductor consortium of state and local government, pre-eminent defense electronics and semiconductor companies, national labs and nationally recognized academic institutions. Our mission is to develop and execute a state-of-the-art 3D Heterogenous Integration manufacturing technology roadmap, and to provide critical pilot manufacturing capabilities to address national security needs and catalyze domestic economic growth.

Join the Texas Institute for Electronics (TIE) and help us push the boundaries in critical semiconductor domains, including advanced packaging, with the aim of reestablishing U.S. prominence in semiconductor manufacturing.

With over $1 billion in funding from the US DoD and the state of Texas, we’re at the forefront of creating cutting-edge semiconductor manufacturing equipment and processes that will set the course for future advancements in semiconductor logic, memory, heterogeneous integration, chip cooling and more. Situated in the heart of Austin — named “America’s Coolest City” by Expedia and “The Best Place to Live in the U.S.” by U.S. News and World Report — the Texas Institute for Electronics embodies the city’s innovative spirit.

UT Austin, recognized by Forbes as one of America’s Best Large Employers, provides outstanding employee benefits and total rewards packages that include:

• Competitive health benefits (employee premiums covered at 100%, family premiums at 50%)
• Voluntary Vision, Dental, Life, and Disability insurance options
• Generous paid vacation, sick time, and holidays
• Teachers Retirement System of Texas, a defined benefit retirement plan, with 8.25% employer matching funds
• Additional Voluntary Retirement Programs: Tax Sheltered Annuity 403(b) and a Deferred Compensation program 457(b)
• Flexible spending account options for medical and childcare expenses
• Robust free training access through LinkedIn Learning plus professional conference opportunities
• Tuition assistance
• Expansive employee discount program including athletic tickets
• Free access to UT Austin's libraries and museums with staff ID card
• Free rides on all UT Shuttle and Austin CapMetro buses with staff ID card
• For more details, please see Benefits | Human Resources and UT Austin Employee Experience | Human Resources and UT Austin Employee Experience | Human Resources

Purpose

TIE is looking for Manager or Director of Cybersecurity Compliance to work on site in Austin, TX, and support the strategy and introduction of products based on unique and highly differentiated capabilities of a preeminent foundry for semiconductor systems and defense electronics companies. The Director of Cybersecurity Compliance will lead the strategic development, implementation, and continuous improvement of the organization's cybersecurity compliance program supporting Controlled Unclassified Information (CUI), regulated manufacturing environments, and federal contract requirements. This individual will oversee the governance, risk, and compliance (GRC) framework for semiconductor manufacturing operations, research laboratories, engineering systems, operational technology (OT), and enterprise infrastructures.

This role will partner with executive leadership, engineering, manufacturing, facilities, IT, and government stakeholders to ensure compliance while enabling business growth, intellectual property protection, and operational resilience.

This position will be responsible for ensuring information systems follow government and their internal regulations while meeting program demands and operating in an accredited state.

Responsibilities

Cybersecurity Compliance Leadership:

• Establish and execute enterprise-wide cybersecurity compliance strategies supporting CUI environments and federal contracts.
• Serve as the senior compliance authority for CMMC, NIST SP 800-171, NIST SP 800-53, NIST Cybersecurity Framework (CSF), DFARS, and related regulatory requirements.
• Lead organizational readiness efforts for CMMC Level 2 and future certification assessments.
• Develop governance frameworks, policies, standards, and procedures supporting secure handling of CUI and other sensitive information assets.
• Brief executive leadership and government stakeholders on cybersecurity risks, compliance posture, remediation activities, and audit readiness.

CUI & Government Program Security:

• Maintain compliance across all CUI information systems, enclaves, cloud environments, and engineering platforms.
• Oversee CUI boundary definition, system scoping, data-flow mapping, and asset inventory.
• Ensure secure storage, transmission, retention, and destruction of CUI in accordance with federal requirements.
• Collaborate with program teams supporting DoD, DARPA, and other government initiatives.
• Guide implementation of security controls and POA&M management activities.

Semiconductor Manufacturing & Operational Technology Security:

• Provide cybersecurity governance for semiconductor fabrication, packaging, testing, and R&D environments.
• Partner with manufacturing engineering, facilities, automation, and MES teams to implement secure OT practices.
• Establish security requirements for:
• Manufacturing Execution Systems (MES)
• Equipment automation platforms
• SCADA and industrial control systems
• Cleanroom operational infrastructure
• Supply chain and vendor connectivity
• HPC and engineering compute environments
• Develop cybersecurity standards for semiconductor tools, vendor integrations, and production networks.

Risk Management & Audit Oversight:

• Lead enterprise risk assessments and control evaluations.
• Direct internal and external cybersecurity audits.
• Manage remediation programs, vulnerability assessments, and control validation activities.
• Track security metrics, compliance KPIs, and regulatory obligations.
• Oversee third-party risk management and supplier cybersecurity reviews.

Security Operations & Continuous Monitoring:

• Partner with Security Operations to establish continuous monitoring programs.
• Oversee compliance-related vulnerability management, configuration management, and endpoint security initiatives.
• Ensure audit logs, monitoring tools, and evidence repositories support compliance objectives.
• Guide incident response activities involving regulated systems and CUI assets.

Team Leadership:

• Build and lead a high-performing cybersecurity compliance and GRC organization.
• Mentor cybersecurity professionals, ISSOs, auditors, and compliance analysts.
• Manage budgets, compliance roadmaps, staffing plans, and external consulting engagements.
• Foster a culture of cybersecurity awareness and accountability throughout manufacturing operations.

Required Qualifications

Senior Manager

• US Citizen
• At least fifteen years of experience in IT and cybersecurity
• At least ten years of cybersecurity experience with at least:
  • Five years leading cybersecurity compliance or GRC programs, and,
  • Three years supporting regulated or government-contracted environments
• Master’s Degree in Cybersecurity, Information Security, Computer Science, Engineering, Information Systems, or a related discipline.
• Demonstrated expertise implementing:
  • CMMC 2.0
  • NIST SP 800-171
  • NIST 800-53
  • NIST Cybersecurity Framework
  • Risk Management Framework (RMF)
• Experience managing audits, assessments, and accreditation activities.
• Experience developing and managing Plans of Action and Milestones (POA&Ms).
• Strong understanding of identity management, vulnerability management, incident response, and secure architecture principles.
• Experience presenting technical and compliance risks to executive leadership.

Director

• US Citizen
• At least twenty years of experience in IT and cybersecurity.
• At least fifteen years of cybersecurity experience with at least:
  • five years leading cybersecurity compliance or GRC programs.
  • three years supporting regulated or government-contracted environments.
  • five years of mentoring and leading Sr. managers and Sr Compliance analyst.
• Experience in leading federal programs thru CMMC level 2 external audit.
• Plus, all remaining qualifications from Senior Manager level.

Relevant education and experience may be substituted as appropriate.

Preferred Qualifications

• More than the required experience as outlined above.
• Certification in:
  • CISSP
  • CISM
  • CISA
  • CRISC
  • CGRC (formerly CAP)
  • Security+
  • CCSP
  • Certified CMMC Professional (CCP)
  • Certified CMMC Assessor (CCA)

Salary Range

TIE pays industry competitive salaries

Work Schedule

• Monday - Friday (specify if schedule is 8am to 5pm, or flexible between 7am and 6pm, etc.)
• On-call work required (specify any details, such as frequency, rotation)
• Occasional/frequent nights/weekends required (specify frequency and any other details)

Working Conditions

• May work around standard office conditions
• May work around electrical and mechanical hazards
• Repetitive use of a keyboard at a workstation
• Use of manual dexterity (ex: using a mouse)

Required Materials

• Letter of Interest
• Resume/CV
• 3 work references with their contact information; at least one reference should be from a supervisor

Important for applicants who are NOT current university employees or contingent workers: You will be prompted to submit your resume the first time you apply, then you will be provided an option to upload a new Resume for subsequent applications. Any additional Required Materials (letter of interest, references, etc.) will be uploaded in the Application Questions section; you will be able to multi-select additional files. Before submitting your online job application, ensure that ALL Required Materials have been uploaded. Once your job application has been submitted, you cannot make changes.

Important for Current university employees and contingent workers: As a current university employee or contingent worker, you MUST apply within Workday by searching for Find UT Jobs. If you are a current University employee, log-in to Workday, navigate to your Worker Profile, click the Career link in the left hand navigation menu and then update the sections in your Professional Profile before you apply. This information will be pulled in to your application. The application is one page and you will be prompted to upload your resume. In addition, you must respond to the application questions presented to upload any additional Required Materials (letter of interest, references, etc.) that were noted above.

----

Employment Eligibility:

Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

----

Retirement Plan Eligibility:

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length. This position has the option to elect the Optional Retirement Program (ORP) instead of TRS, subject to the position being 40 hours per week and at least 135 days in length.

----

Background Checks:

A criminal history background check will be required for finalist(s) under consideration for this position.

----

Equal Opportunity Employer:

The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

----

Pay Transparency:

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

----

Employment Eligibility Verification:

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

----

E-Verify:

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university’s company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following:

• E-Verify Poster (English and Spanish) [PDF]
• Right to Work Poster (English) [PDF]
• Right to Work Poster (Spanish) [PDF]

----

Compliance:

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031.

The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.