Senior Program Manager - IT

RCM Holdco; Gurugram District; On-site; INR 2,800,000 - 4,200,000; Full time

Job summary

R1 RCM India is seeking an experienced IT Risk & Client Assurance professional to manage client cybersecurity responses, RFP/RFI processes, and third-party risk assessments. You will collaborate with Cybersecurity, Compliance, Privacy, Procurement, and Technology teams to ensure accurate, timely responses and robust risk controls.

The role requires 8–10+ years in cybersecurity and IT risk, with hands-on experience in vendor assessments and familiarity with ISO 27001, SOC 2, HITRUST, NIST CSF,

Qualifications

• Bachelor's degree in IT/CS/Cybersecurity or related field.
• 8–10+ years in cybersecurity, IT risk, client assurance, or third‑party risk.
• Experience handling RFPs/RFIs and client security questionnaires.
• Hands-on vendor/third‑party security risk assessments.
• Knowledge of ISO27001, SOC 2, HITRUST, NIST CSF and PCI DSS.
• Strong written communication, analytical, documentation, and stakeholder management.
• Ability to manage multiple assurance activities against tight deadlines.
• CISA, CRISC, CISM, CISSP or ISO 27001 preferred.

Responsibilities

• Manage cybersecurity responses for client and prospect RFPs/RFIs.
• Coordinate security, IT risk and compliance questionnaires from clients and prospective customers.
• Collaborate with internal SMEs to provide accurate, consistent, and timely responses.
• Perform IT/security risk assessments for new vendors during onboarding.
• Conduct periodic risk reassessments of existing vendors based on risk levels.
• Review vendor security controls, certifications, questionnaires, and independent assurance reports.
• Identify, document, and track vendor security risks and remediation actions.
• Work closely with Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.
• Maintain effective tracking, documentation, and reporting of client assurance and third-party risk activities.
• Prepare and share periodic KPI reports on tasks, projects and risk closure actions.

Skills

Cybersecurity management

Risk assessment

Vendor risk management

Stakeholder management

Technical writing

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

ISO 27001

SOC 2

HITRUST

NIST CSF

PCI DSS

Job description

R1 RCM India is proud to be recognized amongst India's Top 50 Best Companies to Work For™ 2023 by Great Place To Work® Institute. We are committed to transform the healthcare industry with our innovative revenue cycle management services. Our goal is to 'make healthcare simpler' and enable efficiency for healthcare systems, hospitals, and physician practices. With over 30,000 employees globally, we are about 14,000 strong in India with offices in Delhi NCR, Hyderabad, Bangalore, and Chennai. Our inclusive culture ensures that every employee feels valued, respected, and appreciated with a robust set of employee benefits and engagement activities.

Role Summary & purpose (Backfill)

We are looking for an experienced IT Risk & Client Assurance professional to manage client cybersecurity assurance requests, RFP/RFI responses, security questionnaires, and third-party IT risk assessments. The role requires strong collaboration across Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.

Key Responsibilities

• Manage cybersecurity responses for client and prospect RFPs/RFIs.
• Complete and coordinate security, IT risk and compliance questionnaires from clients and prospective customers.
• Collaborate with internal SMEs to provide accurate, consistent, and timely responses.
• Perform IT/security risk assessments for new vendors as part of vendor onboarding.
• Conduct periodic risk reassessments of existing vendors based on the risk levels.
• Review vendor security controls, certifications, questionnaires, and independent assurance reports.
• Identify, document, and track vendor security risks and remediation actions.
• Work closely with Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.
• Maintain effective tracking, documentation, and reporting of client assurance and third-party risk activities.
• Prepare and share periodic KPI reports on tasks, projects and risk closure actions.

Qualifications & Experience

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Security, Risk Management, or a related field.
• 8-10+ years of relevant experience in cybersecurity, IT risk, client assurance, third-party risk, IT audit, or related areas.
• Experience responding to RFPs, RFIs, client security questionnaires, and due-diligence requests.
• Hands-on experience performing vendor/third-party security risk assessments and reassessments.
• Working knowledge of security frameworks such as ISO 27001, SOC 2, HITRUST, NIST CSF, and PCI DSS.
• Strong written communication, analytical, documentation, and stakeholder-management skills.
• Ability to manage multiple client and vendor assurance activities against tight deadlines.
• Certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 are preferred.

Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast-growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests.

Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits package. To learn more, visit: r1rcm.com

Visit us on Facebook