Governance, Risk, and Compliance

The Governance, Risk, and Compliance (GRC) team focuses on ensuring information security activities at UTMB are governed by clear policies, informed by risk, and aligned with applicable requirements. Through governance oversight, risk evaluation, and compliance support, the GRC team helps establish a consistent and sustainable approach to managing information security across the organization.

What We Do

Security Governance & Policy Management

Develop and maintain security policies, standards, and guidelines that establish clear expectations for protecting UTMB information and technology assets.

Risk Assessment & Management

Identify, assess, and track information security risks to support informed, risk-based decision-making across the organization.

Regulatory & Compliance Oversight

Support compliance with healthcare, legal, and regulatory requirements by translating obligations into actionable and measurable security controls.

Third‑Party & Vendor Risk Management

Evaluate and monitor the security posture of vendors, applications, and external platforms to help manage risks introduced through third-party relationships.

Contract Security Review & Alignment

Review security-related contract language to help ensure vendor agreements align with UTMB risk, compliance, and data protection requirements.

Exception & Issue Management

Review, document, and track security exceptions and risk acceptances to support visibility, accountability, and remediation efforts.

Security Awareness & Standards Alignment

Promote consistent security practices by aligning controls with recognized security frameworks and providing guidance across UTMB.

Security Reporting & Metrics

Produce risk and compliance metrics that provide leadership with insight into security posture and emerging areas of concern.

Meet the Team

Christian Cauthen

Security Analyst

Mallory Gabriel

Security Analyst

Andrew Ganey

Senior Security Analyst

Louis Perrin