Manager, Governance, Risk & Compliance

Responsibilities

• Lead and enhance the institution's governance, risk management, and compliance framework
• Oversee cybersecurity and technology risk management, including vulnerability management programs
• Manage third-party information security risk assessments and vendor lifecycle monitoring
• Develop and maintain institutional AI governance and information security policies
• Coordinate compliance assessments, audits, and control-assurance activities
• Monitor regulatory landscapes including FERPA, GLBA, and HIPAA to ensure institutional adherence

Requirements

• Bachelor's degree in cybersecurity, information security, risk management, or a related field
• Progressive experience in information security governance and cybersecurity risk management
• Experience leading teams or directing complex, cross-functional GRC programs
• Working knowledge of NIST Cybersecurity Framework and CIS Critical Security Controls
• Proficiency with GRC or vulnerability management platforms (e.g., ServiceNow, Tenable, Qualys)

Preferred Qualifications

• Advanced degree in a relevant discipline
• Professional certifications such as CISSP, CISM, CRISC, or CISA
• Experience in higher education or highly regulated sectors like healthcare or finance

About the Company

Ultimate Medical Academy is a non-profit healthcare educational institution dedicated to preparing students for meaningful careers through interactive online programs and hands-on training.