Director, IT Security Risk

🔥 0 minutes ago

🌽 Illinois – Remote

🌽 Illinois – Remote

💵 $122.4k - $178.8k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

R1 RCM

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2017

💼 Consulting

📦 Logistics

🏥 Healthcare

💰 Private Equity Round on 2024-07

Consulting • Logistics • Healthcare

R1 RCM is a leading provider of revenue cycle management solutions for the healthcare industry. With an emphasis on maximizing financial performance and optimizing patient care, R1 offers a comprehensive platform that integrates data analytics, intelligent technologies, and deep expertise in revenue cycle management. The company assists healthcare providers—ranging from hospitals and health systems to physician and specialty care practices—in capturing revenue opportunities, improving payer and patient cash flows, and ensuring compliance with government regulations. R1 is committed to driving cost reductions and revenue improvements while enhancing the patient experience. Their suite of services includes revenue recovery, clinical integrity, and regulatory navigation, making them a trusted partner for many top healthcare providers.

📋 Description

• Lead cybersecurity governance, risk, and compliance capabilities protecting R1 and customer information assets and technology infrastructure • Report to the Deputy CISO • Lead a US- and India-based team, including approximately two to three direct reports and a broader team of approximately five employees • Develop and execute the strategy and operating program for assessing, monitoring, and mitigating cybersecurity risk from third parties and suppliers • Oversee customer cybersecurity questionnaires, customer cyber risk assessments, risk-exception processing, and maintenance of the cyber risk register • Build and mature scalable governance and third-party risk capabilities, including procedures, documentation, controls, reporting, and stakeholder accountability • Review and optimize processes for efficiency and effectiveness, leveraging automation where appropriate • Partner with customers and internal relationship leaders on cybersecurity inquiries and time-sensitive business needs • Collaborate with IT, Product Development, Procurement, Compliance, business leaders, and Security teams to reduce risk and address customer, contractual, regulatory, and operational requirements • Ensure alignment with regulatory requirements, industry standards, company policies, and cybersecurity best practices • Develop and maintain program procedures, standards, and supporting documentation • Define and communicate program performance, risk trends, priorities, and recommendations to senior management and stakeholders • Monitor industry trends, emerging threats, and evolving cybersecurity governance and third-party risk practices • Foster security awareness, accountability, collaboration, and continuous improvement • Manage relationships with external partners, including security vendors and consultants

🎯 Requirements

• Bachelor’s degree or an equivalent combination of education and relevant experience • 10+ years of cybersecurity, technology risk, governance, risk and compliance, or related experience • At least five years in a people-management role • Demonstrated experience leading cybersecurity governance, risk, and compliance programs, including significant third-party cyber risk management responsibility • Experience building a new cyber GRC or third-party risk capability from the ground up, or materially rebuilding and maturing an existing program • Experience managing customer cybersecurity questionnaires, risk assessments, exceptions, and risk-register processes • Experience leading and developing teams across geographies, ideally including US- and India-based employees • Strong customer-facing and stakeholder-management skills • Ability to work effectively with senior leaders, business partners, Procurement, Compliance, IT, Product Development, and Security teams • Ability to translate cybersecurity risk into business impact, recommendations, metrics, and executive-level reporting • Experience improving processes through standardization, workflow design, and automation • Strong judgment, organization, responsiveness, and ability to manage multiple priorities and rapid-turnaround requests • CISM certification required • CISSP or another relevant cybersecurity or risk certification strongly preferred • Cybersecurity risk experience within healthcare, banking, financial services, or another highly regulated industry preferred • Experience operating in a global, acquisition-oriented, or rapidly changing organization preferred

🏖️ Benefits

• Annual bonus plan with a target of 20.00% • Competitive benefits package • Opportunities to constantly learn, collaborate across groups, and explore new career paths • Meaningful work contributing to communities served around the world • Equal employment opportunity and harassment-free workplace • Reasonable accommodation during the job application process for applicants with disabilities