Director, IT Security Risk & GRC Leader

Socket.dev; Illinois; On-site; USD 122,000 - 179,000; Full time

Job summary

R1 RCM Inc. is seeking a Director, IT Security Risk to lead governance, risk, and compliance across third-party cyber risk and customer inquiries. You will manage a US- and India-based team, drive automation, and work with IT, Compliance, and Security leaders to strengthen security posture.

The role demands a proven track record in building cyber GRC capabilities and translating risk into executive metrics. Competitive pay, annual bonus eligibility, and healthcare benefits are offered.

Qualifications

• Bachelor’s degree or an equivalent combination of education and relevant experience.
• 10+ years in cybersecurity, technology risk, governance, risk and compliance, or related fields with at least 5 years in people management.
• Proven leadership of cyber GRC programs and third-party risk management.
• Experience building or maturing cyber risk capabilities, including customer risk inquiries and risk registers.
• Ability to translate cyber risk into business impact and executive reporting.

Responsibilities

• Develop and execute strategy for assessing, monitoring, and mitigating cybersecurity risk from third parties.
• Lead US- and India-based team, with direct reports and broader staff.
• Oversee responses to customer cyber questionnaires, risk assessments, and risk-exception processing.
• Build scalable governance and third-party risk capabilities with clear procedures and controls.
• Collaborate with stakeholders to address regulatory, contractual, and operational requirements.
• Stay current on industry trends and foster a culture of security awareness.

Skills

Cybersecurity leadership

GRC program management

Third-party risk

Customer-facing

Cross-geo leadership

Automation

Regulatory compliance

Risk communication

Education

Bachelor’s degree or equivalent

Job description

R1 RCM Inc. is seeking a Director, IT Security Risk to lead governance, risk, and compliance across third-party cyber risk and customer inquiries. You will manage a US- and India-based team, drive automation, and work with IT, Compliance, and Security leaders to strengthen security posture.

The role demands a proven track record in building cyber GRC capabilities and translating risk into executive metrics. Competitive pay, annual bonus eligibility, and healthcare benefits are offered.