Global IT Security Risk Director - GRC & Third-Party

R1 RCM; Illinois; On-site; USD 122,000 - 179,000; Full time

Job summary

R1 RCM Inc. is a leading provider of technology-driven solutions that transform patient experience and financial performance for hospitals, health systems, and medical groups.

As Director, IT Security Risk, you will lead governance, risk, and compliance programs across U.S. and India teams, partnering with IT, Compliance, Procurement, and Security to reduce risk and strengthen the organization’s security posture.

Qualifications

• Bachelor’s degree or an equivalent combination of education and relevant experience.
• 10+ years of cybersecurity, technology risk, governance, risk and compliance, or related experience, including at least five years in a people-management role.
• Demonstrated experience leading cybersecurity governance, risk, and compliance programs, with significant responsibility for third-party cyber risk management.
• Experience building a new cyber GRC or third-party risk capability from the ground up, or materially rebuilding and maturing an existing program.
• Experience managing customer cybersecurity questionnaires, risk assessments, exceptions, and risk-register processes.
• Experience leading and developing teams across geographies, ideally including U.S.- and India-based employees.
• Strong customer-facing and stakeholder-management skills, with the ability to work effectively with senior leaders, business partners, Procurement, Compliance, IT, Product Development, and Security teams.
• Ability to translate cybersecurity risk into clear business impact, recommendations, metrics, and executive-level reporting.
• Experience improving processes through standardization, workflow design, and automation.
• Strong judgment, organization, responsiveness, and the ability to manage multiple priorities and rapid-turnaround requests.

Responsibilities

• Develop and execute the strategy and operating program for assessing, monitoring, and mitigating cybersecurity risk from third parties and suppliers.
• Lead, mentor, and develop a U.S.- and India-based team, including approximately two to three direct reports and a broader team of approximately five employees.
• Oversee responses to customer cybersecurity questionnaires, customer cyber risk assessments, risk-exception processing, and maintenance of the cyber risk register.
• Build and mature scalable governance and third-party risk capabilities, including clear procedures, documentation, controls, reporting, and stakeholder accountability.
• Continuously review and optimize processes for efficiency and effectiveness in a changing threat environment, leveraging automation wherever appropriate.
• Partner with customers and internal relationship leaders to respond to cybersecurity inquiries and support time-sensitive business needs.
• Collaborate with IT, Product Development, Procurement, Compliance, business leaders, and other Security teams to reduce risk and address customer, contractual, regulatory, and operational requirements.
• Ensure alignment with applicable regulatory requirements, industry standards, company policies, and cybersecurity best practices.
• Develop and maintain program procedures, standards, and supporting documentation.
• Define and communicate program performance, risk trends, priorities, and recommendations to senior management and other stakeholders.
• Stay current on industry trends, emerging threats, and evolving cybersecurity governance and third-party risk practices.
• Foster a culture of security awareness, accountability, collaboration, and continuous improvement.
• Manage relationships with external partners, including security vendors and consultants.

Skills

Cybersecurity governance

Third-party risk

Risk management

Team leadership

Customer questionnaires

Regulatory compliance

Program development

Automation

Stakeholder management

Global teams

Education

Bachelor’s degree

Job description

R1 RCM Inc. is a leading provider of technology-driven solutions that transform patient experience and financial performance for hospitals, health systems, and medical groups.

As Director, IT Security Risk, you will lead governance, risk, and compliance programs across U.S. and India teams, partnering with IT, Compliance, Procurement, and Security to reduce risk and strengthen the organization’s security posture.