Senior Manager, Third-Party Security

R1 is a leading provider of technology-driven solutions that help hospitals and health systems to manage their financial systems and improve patients’ experience. We are the one company that combines the deep expertise of a global workforce of revenue cycle professionals with the industry's most advanced technology platform, encompassing sophisticated analytics, Al, intelligent automation and workflow orchestration. R1 is a place where we think boldly to create opportunities for everyone to innovate and grow. A place where we partner with purpose through transparency and inclusion. We are a global community of engineers, front-line associates, healthcare operators, and RCM experts that work together to go beyond for all those we serve. Because we know that all this adds up to something more, a place where we're all together better

R1 India is proud to be recognized amongst Top 25 Best Companies to Work For 2024, by the Great Place to Work Institute. This is our second consecutive recognition on this prestigious Best Workplaces list, building on the Top 50 recognition we achieved in 2023. Our focus on employee wellbeing and inclusion and diversity is demonstrated through prestigious recognitions with R1 India being ranked amongst Best in Healthcare, Top 100 Best Companies for Women by Avtar & Seramount, and amongst Top 10 Best Workplaces in Health & Wellness. We are committed to transform the healthcare industry with our innovative revenue cycle management services. Our goal is to ‘make healthcare work better for all’ by enabling efficiency for healthcare systems, hospitals, and physician practices. With over 30,000 employees globally, we are about 16,000+ strong in India with presence in Delhi NCR, Hyderabad, Bangalore, and Chennai. Our inclusive culture ensures that every employee feels valued, respected, and appreciated with a robust set of employee benefits and engagement activities.

Position : Sr. Manager – Cybersecurity (Third-Party Cyber Risk Management)

Location : Noida

Shift Timing : 2 PM to 11 PM

Position Summary : -

We are seeking an experienced Sr. Manager – Third party Cyber Risk Management to lead our Third-party Cybersecurity risk and governance efforts for India / Philippines market of R1 RCM. The Senior Manager – Third-Party Cyber Risk Management is responsible for leading and executing the organization’s cybersecurity oversight of vendors, suppliers, partners, and other external entities. This role ensures that all third-party relationships align with enterprise security policies, regulatory obligations, and risk tolerance levels. The individual will own the third-party risk management (TPRM) lifecycle — from onboarding and due diligence to continuous monitoring and remediation — and will serve as the subject matter expert on vendor security governance.

Key Duties & Responsibilities

Program Leadership & Governance

• Design, implement, and mature the Third-Party Cyber Risk Management Program aligned with frameworks such as NIST CSF, ISO 27001, HIPAA, CIS Controls, and SOC2.
• Develop and maintain policies, standards, and procedures governing vendor security due diligence, onboarding, monitoring, and offboarding.
• Establish and iterate security exhibit for contracts, enforce compliance and iterate wherever needed.
• Lead governance committees or working groups to discuss vendor risk posture, key issues, and remediation progress with business, procurement, and legal teams.
• Define and track Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for vendor risk and present them to leadership and risk committees.

Vendor Risk Assessment & Due Diligence

Continuous monitoring and remediation :

Collaboration and stakeholder management

Reporting and metrics

Experience, Skills & Knowledge : -

Key Competencies : -