Manager, Governance, Risk & Compliance

Vocate is a non-profit higher education and workforce solutions provider dedicated to closing the nation’s talent gaps in critical industries such as healthcare. Through its entities including Ultimate Medical Academy, American Institute, Nasium Training and Global Education Group, Vocate serves more than 20,000 adult learners nationwide, primarily in under-resourced populations. Backed by more than 130 years of combined experience in higher learning across its institutions, Vocate delivers accessible, career-aligned programs enhanced by employer partnerships and comprehensive student support services.

As a full-time team member, you will have access to the following benefits:

• Medical (including prescription), Dental, Vision (UMA subsidized)
• FSA/HSA (Depending on Medical Plan chosen)
• Basic Life Insurance (UMA paid) minimum $50,000 - maximum $250,000 (1x annual salary)
• Additional Voluntary Life Insurance (Team Member paid)
• Employee Assistance Program – EAP (UMA paid)
• Long Term Disability (UMA paid)
• Short Term Disability (Team Member paid)
• Supplemental Insurance such as Critical Illness, Accident, and Hospital (Team Member Paid)
• Paid Time Off – 15 days accrued in year 1, 9 holidays, and 1 day of Volunteering Time Off
• 401k (eligible upon completion of 90 days of employment and must be at least 18 years of age)
• Pet Insurance
• Identity Theft Protection

The Manager, Governance, Risk & Compliance (GRC) is responsible for leading and advancing the institution’s governance, risk management, compliance, and information security programs to support the achievement of organizational objectives and regulatory requirements. This role develops, implements, and monitors frameworks, policies, controls, and risk mitigation strategies that promote operational effectiveness, safeguard institutional assets, and ensure compliance with applicable laws, regulations, accreditation standards, and internal policies.

The Manager partners with leaders across the institution to foster a culture of accountability, risk awareness, and continuous improvement in support of the institution’s mission and long-term success.

The Manager also provides hands‑on leadership for key information security programs, including vulnerability management, third‑party risk management, security performance reporting, policy governance, and the continuous improvement of security controls and operational practices.

• Lead Governance, Risk, and Compliance Programs: Develop, implement, and continuously enhance the institution’s governance, risk management, and compliance framework to ensure alignment with organizational objectives, regulatory requirements, accreditation standards, and recognized industry practices.
• Conduct Cybersecurity and Technology Risk Management
  
  Activities:
  
  Lead the identification, assessment, monitoring, and mitigation of cybersecurity and technology risks. Support the institution’s enterprise risk-management process by communicating material technology risks, control deficiencies, and actionable mitigation strategies to leadership.
• Oversee Regulatory and Compliance Requirements: Serve as a trusted business partner to departments across the institution and collaborate with Legal and Compliance to address applicable federal, state, higher education, privacy, and information security requirements, including FERPA, GLBA, the FTC Safeguards Rule, HIPAA where applicable, and state privacy and breach-notification requirements.
• Manage Security Governance and Architecture Oversight: Partner with Information Technology, Engineering, Enterprise Architecture, and security teams to establish and maintain security governance processes, evaluate technical and administrative controls, and ensure technology…