Senior Program Manager - IT

R1 RCM Global Private Limited; Gurugram District; On-site; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Competitive benefits package

Growth opportunities

Job summary

R1 RCM India is seeking an experienced IT Risk & Client Assurance professional to manage client cybersecurity assurance requests, RFP/RFI responses, security questionnaires, and third‑party IT risk assessments.

The role requires strong collaboration across Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams, with a focus on timely, accurate responses and ongoing vendor risk management.

Qualifications

• Bachelor’s degree in IT, CS, Cybersecurity or Risk Management or related field.
• 8–10+ years in cybersecurity, IT risk, client assurance, or third‑party risk.
• Experience responding to RFPs/RFIs and security questionnaires.
• Hands‑on vendor/third‑party risk assessments and reassessments.
• Knowledge of ISO 27001, SOC 2, HITRUST, NIST CSF, PCI DSS.

Responsibilities

• Manage cybersecurity responses for client and prospect RFPs/RFIs.
• Coordinate security, IT risk and compliance questionnaires from clients.
• Collaborate with internal SMEs for accurate and timely responses.
• Perform IT/security risk assessments for new vendors as part of onboarding.
• Conduct periodic vendor risk reassessments based on risk levels.
• Review vendor security controls, certifications and independent assurance reports.
• Identify, document and track vendor security risks and remediation actions.
• Work with Cybersecurity, Compliance, Privacy, Procurement, Technology and Business teams.
• Maintain tracking, documentation and reporting of client assurance activities.
• Prepare periodic KPI reports on tasks, projects and risk closure.

Skills

Cybersecurity

Risk management

Stakeholder management

Written communication

Analytical skills

Education

Bachelor’s degree in Information Technology / Computer Science / Cybersecurity / Information Security / Risk Management

Job description

R1 RCM India is proud to be recognized amongst India's Top 50 Best Companies to Work For™ 2023 by Great Place To Work® Institute. We are committed to transform the healthcare industry with our innovative revenue cycle management services. Our goal is to ‘make healthcare simpler’ and enable efficiency for healthcare systems, hospitals, and physician practices. With over 30,000 employees globally, we are about 14,000 strong in India with offices in Delhi NCR, Hyderabad, Bangalore, and Chennai. Our inclusive culture ensures that every employee feels valued, respected, and appreciated with a robust set of employee benefits and engagement activities.

Role Summary & purpose (Backfill)

We are looking for an experienced IT Risk & Client Assurance professional to manage client cybersecurity assurance requests, RFP/RFI responses, security questionnaires, and third‑party IT risk assessments. The role requires strong collaboration across Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.

Key Responsibilities

• Manage cybersecurity responses for client and prospect RFPs/RFIs.
• Complete and coordinate security, IT risk and compliance questionnaires from clients and prospective customers.
• Collaborate with internal SMEs to provide accurate, consistent, and timely responses.
• Perform IT/security risk assessments for new vendors as part of vendor onboarding.
• Conduct periodic risk reassessments of existing vendors based on the risk levels.
• Review vendor security controls, certifications, questionnaires, and independent assurance reports.
• Identify, document, and track vendor security risks and remediation actions.
• Work closely with Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.
• Maintain effective tracking, documentation, and reporting of client assurance and third‑party risk activities.
• Prepare and share periodic KPI reports on tasks, projects and risk closure actions.

Qualifications & Experience

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, Risk Management, or a related field.
• 8–10+ years of relevant experience in cybersecurity, IT risk, client assurance, third‑party risk, IT audit, or related areas.
• Experience responding to RFPs, RFIs, client security questionnaires, and due‑diligence requests.
• Hands‑on experience performing vendor/third‑party security risk assessments and reassessments.
• Working knowledge of security frameworks such as ISO 27001, SOC 2, HITRUST, NIST CSF, and PCI DSS.
• Strong written communication, analytical, documentation, and stakeholder‑management skills.
• Ability to manage multiple client and vendor assurance activities against tight deadlines.
• Certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 are preferred.

Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast‑growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests. Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits package.

To learn more, visit: r1rcm.com Visit us on Facebook R1 is the leader in healthcare revenue management, helping providers achieve new levels of performance through smart orchestration. A pioneer in the industry, R1 created the first Healthcare Revenue Operating System: a modular, intelligent platform that integrates automation, AI, and human expertise to strengthen the entire revenue cycle. With more than 20 years of experience, R1 partners with 1,000 providers, including 95 of the top 100 U.S. health systems, and handles over 270 million payer transactions annually. This scale provides unmatched operational insight to help healthcare organizations unlock greater long‑term value. To learn more, visit: https://www.r1rcm.com.