Skip to main content
Texas Tech University

Staff Position Details

FT Position Code S1508
Position Class Title Enterprise GRC Manager
Position Description The Enterprise Governance Risk Compliance Manager's scope of responsibilities includes enterprise-wide identification and assessment of risks; validation of internal controls; and assessment and validation of compliance with applicable state and federal laws, regulations, university operating policies, and industry standards to safeguard the institution's information resources. Responsible for supervision, training, and development of direct reports and will manage risks, compliance, and assurance projects.
The Enterprise Governance Risk Compliance Manager will work with other departments and areas of tactical and strategic levels and will also interface with stakeholders, vendors, and other partners in providing risk, compliance, and assurance services.
Discretion and sound judgment are expected. Enterprise positions are restricted for use in central IT areas reporting to the institutional CIO and, as such, may interface with key IT leadership and/or other functional leadership within the institutions.
Essential Job Functions Assess, document, make recommendations, and report on information technology and related security risks and controls in accordance with legal requirements, standards, institutional policies, and industry best practices.
Lead AI risk management processes, including risk identification, assessment, and prioritization; maintaining AI technology and use case inventory; and documenting risk mitigation activities.
Work closely with other TTU teams to track, follow up, and report on remediation plans and communication observations to a broad range of both technical and non-technical audiences.
Work with internal and third-party assessors, auditors, and consultants as directed.
Assist in the creation of governance, risk, and compliance metrics, analytics, and reports.
Assist in the review of IT policies, procedures, standards, strategic plans, and contracts.
Lead or conduct GRC activities such as IT reviews, audits, and assessments, or projects as directed.
Develop training plans for GRC team members regarding effective governance, risk, and compliance practices.
May create and deliver reports and presentations to management, discuss findings and conclusions, and recommend corrective actions to improve operations and reduce risk.
Maintains an active awareness of: the evolving compliance and security threat landscapes and federal, state, and local regulations and policies.
Qualifications Bachelor's degree required with coursework in cybersecurity, computer science, MIS, IT, business, or other related area plus five years related experience OR a combination of related education and/or experience.
Knowledge, Skill, & Abilities Demonstrated ability to: (1) Develop strategies and execute effective solutions within complex systems and environments. (2) Exercise judgment based on an understanding of applicable laws, regulations, organizational policies, and activities. (3) Plan and organize effectively, prioritize goals, and manage timelines efficiently. (4) Communicate effectively, both orally and in writing. (5) Lead information technology risk identification, assessment, mitigation, controls validation, compliance verification, and policy governance efforts.
Knowledge of: (1) Information security risks, controls, and control validation techniques. (2) Information security industry standards & frameworks (e.g., NIST, ISO, SANS, etc.) (3) Laws and regulations impacting information security (e.g., HIPAA, TAC 219 and 477, FERPA, PCI-DSS, etc.).
Experience in one or more of the domains of knowledge as defined by ISACA's CISA and/or ISC2's CISSP.
Must have the ability to successfully support the Texas Tech community with strong customer service.
FLSA Exempt
Employee Class E1
EEO 30 - Professional
ORP Eligible No

← Back to Glossary List

Human Resources

© 2026  Texas Tech University Mar 24, 2026 11:09 AM