Director, IT Security Risk & Third-Party Governance

R1-Rc; Illinois; On-site; USD 122,000 - 179,000; Full time

Benefits offered by this job

Annual bonus plan

Competitive benefits package

Job summary

R1 RCM Inc. in the United States is seeking a Director, IT Security Risk to mature and automate cyber risk programs across US and India teams, protecting patient data and customer information assets and technology infrastructure.

You will build governance, lead a US- and India-based team of two to three direct reports and a broader staff, respond to customer questionnaires, and align with IT, Compliance, Procurement and Security teams to satisfy regulatory and contractual requirements.

Qualifications

• 10+ years in cybersecurity, technology risk, governance, risk and compliance, or related experience.
• At least five years in a people-management role across geographies (US and India).
• Experience leading cybersecurity governance, risk, and compliance programs with third-party risk focus.
• Ability to translate risk into business impact and executive-level reporting.

Responsibilities

• Develop and execute strategy and operating program for assessing, monitoring, and mitigating cybersecurity risk from third parties and suppliers.
• Lead, mentor, and develop a US- and India-based team of direct reports and broader staff.
• Oversee responses to customer cybersecurity questionnaires, risk assessments, and risk-exception processes.
• Build scalable governance and third-party risk capabilities with clear procedures and reporting.
• Collaborate with IT, Procurement, Compliance, and Security to meet regulatory and contractual requirements.
• Stay current on industry trends, emerging threats, and evolving governance practices.

Skills

Cybersecurity leadership

GRC programs

Third-party risk

Team management

Regulatory compliance

Education

Bachelor’s degree

CISM certification

CISSP or equivalent certification

Job description

R1 RCM Inc. in the United States is seeking a Director, IT Security Risk to mature and automate cyber risk programs across US and India teams, protecting patient data and customer information assets and technology infrastructure.

You will build governance, lead a US- and India-based team of two to three direct reports and a broader staff, respond to customer questionnaires, and align with IT, Compliance, Procurement and Security teams to satisfy regulatory and contractual requirements.