Review vendor security controls, certifications, questionnaires, and independent assurance reports.
Identify, document, and track vendor security risks and remediation actions.
Work closely with Cybersecurity, Compliance, Privacy, Procurement, Technology, and Business teams.
Maintain effective tracking, documentation, and reporting of client assurance and third-party risk activities.
Prepare and share periodic KPI reports on tasks, projects and risk closure actions
Qualifications & Experience
Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Information Security, Risk Management, or a related field.
8–10+ years of relevant experience in cybersecurity, IT risk, client assurance, third-party risk, IT audit, or related areas.
Experience responding to RFPs, RFIs, client security questionnaires, and due-diligence requests.
Hands-on experience performing vendor/third-party security risk assessments and reassessments.
Working knowledge of security frameworks such as ISO 27001, SOC 2, HITRUST, NIST CSF, and PCI DSS.
Strong written communication, analytical, documentation, and stakeholder-management skills.
Ability to manage multiple client and vendor assurance activities against tight deadlines.
Certifications such as CISA, CRISC, CISM, CISSP, or ISO 27001 are preferred.
Working in an evolving healthcare setting, we use our shared expertise to deliver innovative solutions. Our fast-growing team has opportunities to learn and grow through rewarding interactions, collaboration and the freedom to explore professional interests.
Our associates are given valuable opportunities to contribute, to innovate and create meaningful work that makes an impact in the communities we serve around the world. We also offer a culture of excellence that drives customer success and improves patient care. We believe in giving back to the community and offer a competitive benefits package. To learn more, visit: r1rcm.com
Visit us on Facebook
