Manager, Cybersecurity Governance, Risk & Compliance

🔥 14 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ensemble Health Partners

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

⚕️ Healthcare Insurance

☁️ SaaS

🏢 Enterprise

💰 Private Equity Round on 2022-03

Healthcare Insurance • SaaS • Enterprise

Ensemble Health Partners is a leading provider of revenue cycle management (RCM) services for healthcare organizations. They offer an end-to-end RCM solution that helps hospitals, health systems, and affiliated physician groups optimize their revenue cycles, reduce denials and underpayments, and enhance patient experiences using a combination of expert management and advanced technology. Ensemble Health Partners leverages certified operators and AI to deliver consistent results, improve collections, and support future growth for healthcare providers. They are recognized for their robust client partnerships and commitment to delivering reliable revenue lift and cost savings for their clients.

📋 Description

• The Cybersecurity Manager – Third-Party Risk Management (TPRM) is responsible for the operational leadership, effectiveness, and continuous maturation of the organization's Third-Party Risk Management program. • Working closely with the Director of TPRM, this role leads a team responsible for vendor risk assessments, contract security reviews, continuous monitoring, remediation governance, and risk reporting activities. • Provide day-to-day leadership, guidance, and oversight for TPRM team members. • Coach, mentor, and develop team members through performance feedback, career development planning, training opportunities, and formal performance evaluations. • Manage team capacity, workload prioritization, resource allocation, and operational challenges to ensure timely delivery of assessments, contract reviews, strategic initiatives, and departmental objectives. • Accountable for team performance, service delivery metrics, quality standards, and achievement of operational goals. • Identify staffing, skillset, and resource needs to support current operations and future program growth. • Foster a culture of accountability, collaboration, innovation, and continuous improvement. • Provide operational oversight and quality assurance for third-party risk assessments, contract security reviews, continuous monitoring activities, and risk evaluations, ensuring consistent application of established methodologies and quality standards. • Own the operational health of the enterprise third-party portfolio by ensuring assessment service levels, continuous monitoring, remediation tracking, and executive visibility objectives are achieved. • Serve as the primary escalation point for complex vendor risk decisions, including risk acceptances, exceptions, compensating controls, remediation plans, and vendor approval recommendations. • Review and approve high-risk assessment findings, risk ratings, remediation recommendations, and exception requests to ensure consistency with enterprise risk standards. • Collaborate with business stakeholders on critical vendor engagements and initiatives.

🎯 Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or a related field, or equivalent combination of education and experience. • Minimum 8 years of cybersecurity, risk management, governance, compliance, or third-party risk management experience. • Minimum 2-3 years of direct people leadership experience. • Experience leading enterprise Third-Party Risk Management programs or significant cybersecurity governance initiatives. • Experience developing executive-level reporting, performance metrics, and strategic communications. • Demonstrated experience leading teams responsible for complex vendor risk assessments and cybersecurity evaluations. • Strong understanding of third-party risk management practices, cybersecurity controls, and risk assessment methodologies. • Experience developing policies, standards, and governance processes within cybersecurity or risk management functions. • Strong project management, organizational, and analytical skills. • Excellent written, verbal, and presentation skills with the ability to communicate effectively to both technical and executive audiences. • Ability to balance strategic planning with hands-on execution in a dynamic environment.

🏖️ Benefits

• healthcare • time off • retirement • well-being programs • professional certification opportunities • tuition reimbursement • quarterly and annual incentive programs