R1 - Cyber Security Manager - NIST

Position Summary :

We are seeking an experienced Sr. Manager Third party Cyber Risk Management to lead our Third-party Cybersecurity risk and governance efforts for India / Philippines market of R1 RCM.

The Senior Manager Third-Party Cyber Risk Management is responsible for leading and executing the organizations cybersecurity oversight of vendors, suppliers, partners, and other external entities.

This role ensures that all third-party relationships align with enterprise security policies, regulatory obligations, and risk tolerance levels.

The individual will own the third-party risk management (TPRM) lifecycle from onboarding and due diligence to continuous monitoring and remediation and will serve as the subject matter expert on vendor security governance.

Key Duties & Responsibilities :

Program Leadership & Governance :

• Design, implement, and mature the Third-Party Cyber Risk Management Program aligned with frameworks such as NIST CSF, ISO 27001, HIPAA, CIS Controls, and SOC2.
• Develop and maintain policies, standards, and procedures governing vendor security due diligence, onboarding, monitoring, and offboarding.
• Establish and iterate security exhibit for contracts, enforce compliance and iterate wherever needed.
• Lead governance committees or working groups to discuss vendor risk posture, key issues, and remediation progress with business, procurement, and legal teams.
• Define and track Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for vendor risk and present them to leadership and risk committees.

Vendor Risk Assessment & Due Diligence :

Continuous monitoring and remediation :

Collaboration and stakeholder management :

Reporting and metrics : Maintain a vendor risk register and ensure accurate documentation of risk decisions, exceptions, and compensating controls.

Experience, Skills & Knowledge :

Key Competencies :

(ref : hirist.tech)