Senior Program Manager - IT

Location: Gurugram, India

R1 RCM India is proud to be recognized amongst India's Top 50 Best Companies to Work For™ 2023 by Great Place To Work® Institute. We are committed to transform the healthcare industry with our innovative revenue cycle management services. Our goal is to ‘make healthcare simpler’ and enable efficiency for healthcare systems, hospitals, and physician practices. With over 30,000 employees globally, we are about 14,000 strong in India with offices in Delhi NCR, Hyderabad, Bangalore, and Chennai. Our inclusive culture ensures that every employee feels valued, respected, and appreciated with a robust set of employee benefits and engagement activities.

Role Summary & purpose (Backfill)

We are looking for an experienced IT Risk & Client Assurance professional to manage client cybersecurity assurance requests, RFP/RFI responses, security questionnaires, and third-party IT risk assessments. The role requires strong collaboration across Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.

Key Responsibilities

• Manage cybersecurity responses for client and prospect RFPs/RFIs.
• Complete and coordinate security, IT risk and compliance questionnaires from clients and prospective customers.
• Collaborate with internal SMEs to provide accurate, consistent, and timely responses.
• Perform IT/security risk assessments for new vendors as part of vendor onboarding.
• Conduct periodic risk reassessments of existing vendors based on the risk levels
• Review vendor security controls, certifications, questionnaires, and independent assurance reports.
• Identify, document, and track vendor security risks and remediation actions.
• Work closely with Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.
• Maintain effective tracking, documentation, and reporting of client assurance and third-party risk activities.
• Prepare and share periodic KPI reports on tasks, projects and risk closure actions

Qualifications & Experience

Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, Risk Management, or a related field.

8–10+ years of relevant experience in cybersecurity, IT risk, client assurance, third-party risk, IT audit, or related areas.

Experience responding to RFPs, RFIs, client security questionnaires, and due-diligence requests.

Hands-on experience performing vendor/third-party security risk assessments and reassessments.

Working knowledge of security frameworks such as ISO 27001, SOC 2, HITRUST, NIST CSF, and PCI DSS.

Strong written communication, analytical, documentation, and stakeholder-management skills.

Ability to manage multiple client and vendor assurance activities against tight deadlines.

Certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 are preferred.

Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast-growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests.

Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits package. To learn more, visit: r1rcm.com

Visit us on Facebook

Additional Locations: Noida, India