Cyber Security Engineer

R1 RCM, Inc.; Gurugram District; On-site; INR 3,000,000 - 4,800,000; Full time

Job summary

R1 RCM India seeks a Lead Staff Engineer (IT GRC) in Gurugram to drive governance, risk, and compliance across applications, infrastructure, and IT security for a multi-client, high-volume environment.

You will develop and report KPI-driven risk controls, shape policies, and collaborate with Operations, Management, and Customers to enhance ITSM processes and service quality.

Qualifications

• 7+ years of IT security, GRC, and ITSM in a large multiclient environment.
• Strong knowledge of HIPAA, HITRUST, SOC2, PCI-DSS.
• Ability to lead risk management, policies, and KPIs across stakeholders.
• Excellent communication and leadership to interact with executives.

Responsibilities

• Lead IT GRC across applications, infrastructure, and IT security.
• Establish, maintain, and report security KPIs to stakeholders.
• Manage risk registers and remediation actions with process owners.
• Improve ITSM processes with Operations and Customers; lead implementation.
• Review and update Organization IT Management and IT Security Policies.

Skills

HIPAA

HITRUST

SOC2

PCI-DSS

ITSM

GRC

Policy Management

Leadership

Education

CISA

CRISC

CISSP

ISO 27001

Tools

SIEM

Vulnerability Scanners

Job description

R1 RCM India is proud to be recognized amongst India's Top 50 Best Companies to Work For™ 2023 by Great Place To Work® Institute. We are committed to transform the healthcare industry with our innovative revenue cycle management services. Our goal is to ‘make healthcare simpler’ and enable efficiency for healthcare systems, hospitals, and physician practices. With over 30,000 employees globally, we are about 14,000 strong in India with offices in Delhi NCR, Hyderabad, Bangalore, and Chennai. Our inclusive culture ensures that every employee feels valued, respected, and appreciated with a robust set of employee benefits and engagement activities.

Job Title: Lead Staff Engineer (IT GRC)

Location: Gurugram

Job Summary

Role is for a lead in IT GRC consisting of Application, Infrastructure, and IT Security.

Key Responsibilities & Required Skills

• Role requires you to be a highly motivated, customer focused, solution centric and forward-thinking individual.
• Working experience and strong knowledge of HIPAA, HITRUST, SOC2, PCI-DSS
• Establish, maintain, and report security KPI’s to various stakeholders. Lead exception management group for managing exceptions aligned with risk, compensating controls and periodic review. Formulate and review policies, processes and procedures on periodic basis aligned with risk and industry standards
• Identifying and analyzing various risks (i.e, Business, Financial, Vendor, Customer).
• Developing risk management controls and contingency plans.
• Testing and reviewing the risk register periodically. Follow-up on status of risk mitigating actions with process owners.
• Work with Operations Team, Management and Customer for improving ITSM processes and leading the implementation of the same.
• Periodic Review and updates on Organization's IT Management and IT Security Policies.
• Strong Leadership/ Team Building/ Decision Making attribute.
• Proven successful work experience of 7years+, supporting IT security compliance, ITSM Service Management in a large, high volume multiclient environment supporting several remote locations.
• In-depth understanding of a wide array of infrastructure and application security technologies and operations.
• Customer-service oriented with a problem-solving attitude.
• Excellent organization, presentation, communications, and interpersonal skills to effectively communicate with technical, non-technical, and executive levels.
• Proven ability to build and maintain effective relationships with all customer stakeholders, particularly from a service focus, service quality standpoint.
• Expertise in answering queries/questionnaires from the Customers/Vendors at GRC level.

Certifications

Preferred to have certificates (any one)- CISA/CRISC/CISSP/ISO