GRC Manager / Offshore Team Lead

Health Catalyst; Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

Health Catalyst is seeking an offshore GRC leader in India to establish and scale the GRC function, aligning with US leadership. You will oversee team formation, governance, evidence collection, and audit readiness while driving continuous improvement across global operations.

The role requires a strong background in HITRUST, SOC 2, ISO 27001, and NIST, plus leadership of cross-functional teams and a proactive, solution-oriented mindset. Excellent stakeholder communication is essential.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Business or related field, or equivalent experience.
• 5+ years in Governance, Risk & Compliance, Information Security, Audit, or related disciplines.
• Demonstrated leadership of teams/projects in a compliance/security environment.
• Strong understanding of HITRUST, SOC 2, ISO 27001, NIST and related frameworks.
• Strong communication skills with both technical and non-technical stakeholders.
• Certifications: HITRUST CCSFP, CISM, CRISC or similar.

Responsibilities

• Establish offshore GRC function in India, define team structure, processes, onboarding and performance expectations.
• Provide day-to-day leadership, coaching, and guidance to offshore team members.
• Track, analyze, and report KPIs related to customer risk assessments, evidence management, policy governance and other GRC activities.
• Review evidence submissions to ensure accuracy, completeness, relevance and audit readiness.
• Partner with U.S.-based GRC leadership to align priorities and ensure consistency across global operations.
• Evaluate existing GRC processes and implement improvements for efficiency, scalability and control.

Skills

GRC Leadership

Audit Readiness

Policy Governance

Evidence Management

Data Automation

Education

Bachelor's degree in Cybersecurity / Information Security

Tools

GRC Platforms

Policy Management Tools

Job description

Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through:

• Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation
• Analytics: deliver analytic applications & services that generate insight on how to measurably improve
• Expertise: provide clinical, financial & operational experts who enable & accelerate improvement
• Engagement: attract, develop and retain world-class team members by being a best place to work

Reports To GRC Manager (U.S.) Location India (Hyperbad or Punjab)

What You Can Make a Difference

In this role, you will make a difference by establishing Health Catalyst's offshore GRC presence in India and helping shape how the function scales. As the first dedicated offshore GRC leader, you will partner closely with U.S.-based GRC leadership, control owners and cross-functional stakeholders to strengthen audit readiness, improve evidence quality, and mature core GRC processes.

You will be expected to operate with initiative in ambiguous situations, identify gaps without waiting to be prompted, and bring practical, creative solutions that improve consistency, accountability, and control effectiveness. Over time, you will build and lead a team that supports customer risk assessments, policy and procedure governance, automated evidence collection, and continuous improvement across the GRC program.

Key Responsibilities

• Establish and help scale Health Catalyst's offshore GRC function in India, including supporting the definition of team structure, operational processes, onboarding plans, and performance expectations.
• Provide day-to-day leadership, coaching, and guidance to offshore team members while fostering a culture of accountability, quality, collaboration, and continuous improvement.
• Track, analyze, and report key performance indicators (KPIs) related to customer risk assessments, evidence management, policy governance, and other GRC operational activities.
• Review evidence submissions to ensure accuracy, completeness, relevance, and audit readiness before they are utilized for audits, customer assessments, or compliance reporting.
• Partner closely with U.S.-based GRC leadership to align priorities, communicate progress, address challenges, and ensure consistency across global operations.
• Evaluate existing GRC processes, identify opportunities for improvement, and implement solutions that enhance efficiency, consistency, scalability, and control effectiveness.

Qualifications

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Business, or a related field, or equivalent professional experience.

5+ years of experience in Governance, Risk & Compliance, Information Security, Audit, or related disciplines.

Demonstrated experience leading teams, projects, or operational functions within a compliance or security environment.

Strong understanding of HITRUST, SOC 2, ISO 27001, NIST, and related governance and compliance frameworks.

Strong communication skills with the ability to speak to technical and non-technical stakeholders about compliance frameworks.

One or more of the following certifications required: HITRUST CCSFP, CISM, CRISC, or similar.

Leadership & Success Attributes

• Comfortable navigating ambiguity and changing priorities while maintaining focus on business objectives and deliverables.
• Strong critical-thinking and analytical skills with the ability to assess problems, identify root causes, and recommend practical solutions.
• Self-starter who demonstrates initiative, accountability, and a willingness to take ownership beyond formally assigned responsibilities when needed.
• Demonstrated track record of closing out audits and remediation efforts, from findings to final sign-off.
• Takes ownership of delegated work end to end, keeping leadership updated at key milestones through completion.
• Actively looks for ways to apply AI and automation to cut manual work, from evidence gathering to routine reporting, and redirects that time toward higher-value risk analysis.
• Builds working relationships with internal and external stakeholders, and uses that network to move objectives through teams and channels outside this role's direct control.

Preferred Skills

• Experience with GRC platforms (Anecdotes or similar).
• Familiarity with policy management tools and audit processes.
• Knowledge of cloud environments and SaaS security principles.

Success Metrics & KPIs

• Team Leadership & Development: Successfully establish and scale the offshore GRC function, including onboarding, training, and development of team members.
• Customer Risk Assessments: Achieve greater than 95% on-time delivery of assigned customer assurance requests.
• Policy & Procedure Governance: Ensure 100% of in-scope policies are reviewed within required review cycles.
• Audit & Evidence Management: Achieve less than 5% evidence rejection or resubmission rate due to quality, completeness, or relevance issues.
• Operational Excellence & Continuous Improvement: Identify, document, and implement at least one meaningful process improvement initiative per quarter.
• Stakeholder Partnership: Establish trusted working relationships with leadership, control owners, and stakeholders.
• Problem Solving & Ownership: Proactively identify risks, process gaps, and operational challenges and develop practical solutions.
• Strategic Contribution: Contribute recommendations that improve GRC program maturity, audit readiness, scalability, and operational effectiveness.

Why Join Us?

Lead a growing offshore GRC team and shape its success. Work with modern compliance automation tools. Collaborate with global teams on strategic governance initiatives.

About Us

Health Catalyst is a leading provider of data and analytics technology and services that ignite smarter healthcare, lighting the path to measurable clinical, financial, and operational improvement. More than 1,100 organizations worldwide rely on Health Catalyst's offerings, including our cloud-based technology ecosystem, Health Catalyst Ignite™, AI-enabled data and analytics solutions, and expert services to drive meaningful outcomes across hundreds of millions of patient records.

Powered by high-value data, standardized measures and registries, and deep healthcare domain expertise, Ignite helps organizations transform complex information into actionable insights. Backed by a multi-decade mission and a proven track record of delivering billions of dollars in measurable results, Health Catalyst continues to serve as the catalyst for massive, data-informed healthcare improvement and innovation.

Health Catalyst has cultivated a workplace culture that recognizes, values, and supports each individual. This commitment to a compassionate and inclusive work environment has earned Health Catalyst more than 100 "Best Place to Work" awards to date, including multiple prestigious awards for its exemplary culture in 2025: Women Tech Council's Shatter List, Modern Healthcare's Best Place to Work in Healthcare, U.S. News & World Report's Best Companies to Work For, Newsweek's America’s Greatest Workplaces for Diversity, Newsweek's America’s Greatest Workplaces for Gen Z, Newsweek's America’s Greatest Workplaces in Tech. Becky Vea, Associate Chief People Officer at Health Catalyst, Awarded the HR Achievement Award by Utah Business.

At Health Catalyst, we celebrate and are committed to diversity and inclusion across all dimensions, including but not limited to race, gender, identity, age, and religion. Our six team member resource groups include: Shades, Queers & Allies, Women Empowered, InspireAsian, Neurodivergent, and Military, Veterans, Families, and Allies.

We offer best-in-class benefits designed to promote ownership, inclusion, and a healthy work-life balance. Our team enjoys a remote-first work environment, flexible PTO, a professional development stipend, and meaningful opportunities for career growth and development.

At Health Catalyst, we appreciate the opportunity to benefit from the diverse backgrounds and experiences of others. Because of our deep commitment to respect every individual, Health Catalyst is an equal opportunity employer.