Director, IT Security Risk

R1 RCM

. Lead cybersecurity governance, risk, and compliance capabilities protecting R1 and customer information assets and technology infrastructure .

Posted 9/21/2026full-timeRemote • Illinois • United StatesLead💰 $122,366 - $178,767 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading cybersecurity governance, risk, and compliance programs, with a strong focus on third-party risk management and stakeholder collaboration. Proven ability to develop strategies, optimize processes, and communicate risk metrics to senior management.

Highest-signal resume keywords

Cybersecurity GovernanceRisk ManagementThird-Party Risk ManagementCISM CertificationCustomer Stakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Risk AssessmentGovernance, Risk, and Compliance (GRC)Process StandardizationWorkflow DesignAutomation ImplementationRisk-Register ManagementCybersecurity Best PracticesPerformance Metrics DevelopmentRegulatory ComplianceEmerging Threat Monitoring

Soft Skills

LeadershipCustomer-Facing SkillsOrganizational SkillsResponsivenessCollaboration

Certifications & Qualifications

CISM CertificationCISSP Certification

Industry Keywords

Healthcare CybersecurityBanking CybersecurityFinancial Services CybersecurityHighly Regulated IndustryGlobal Organization Experience

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead cybersecurity governance, risk, and compliance capabilities protecting R1 and customer information assets and technology infrastructure
Report to the Deputy CISO
Lead a US- and India-based team, including approximately two to three direct reports and a broader team of approximately five employees
Develop and execute the strategy and operating program for assessing, monitoring, and mitigating cybersecurity risk from third parties and suppliers
Oversee customer cybersecurity questionnaires, customer cyber risk assessments, risk-exception processing, and maintenance of the cyber risk register
Build and mature scalable governance and third-party risk capabilities, including procedures, documentation, controls, reporting, and stakeholder accountability
Review and optimize processes for efficiency and effectiveness, leveraging automation where appropriate
Partner with customers and internal relationship leaders on cybersecurity inquiries and time-sensitive business needs
Collaborate with IT, Product Development, Procurement, Compliance, business leaders, and Security teams to reduce risk and address customer, contractual, regulatory, and operational requirements
Ensure alignment with regulatory requirements, industry standards, company policies, and cybersecurity best practices
Develop and maintain program procedures, standards, and supporting documentation
Define and communicate program performance, risk trends, priorities, and recommendations to senior management and stakeholders
Monitor industry trends, emerging threats, and evolving cybersecurity governance and third-party risk practices
Foster security awareness, accountability, collaboration, and continuous improvement
Manage relationships with external partners, including security vendors and consultants

Requirements

What you’ll need

Bachelor’s degree or an equivalent combination of education and relevant experience
10+ years of cybersecurity, technology risk, governance, risk and compliance, or related experience
At least five years in a people-management role
Demonstrated experience leading cybersecurity governance, risk, and compliance programs, including significant third-party cyber risk management responsibility
Experience building a new cyber GRC or third-party risk capability from the ground up, or materially rebuilding and maturing an existing program
Experience managing customer cybersecurity questionnaires, risk assessments, exceptions, and risk-register processes
Experience leading and developing teams across geographies, ideally including US- and India-based employees
Strong customer-facing and stakeholder-management skills
Ability to work effectively with senior leaders, business partners, Procurement, Compliance, IT, Product Development, and Security teams
Ability to translate cybersecurity risk into business impact, recommendations, metrics, and executive-level reporting
Experience improving processes through standardization, workflow design, and automation
Strong judgment, organization, responsiveness, and ability to manage multiple priorities and rapid-turnaround requests
CISM certification required
CISSP or another relevant cybersecurity or risk certification strongly preferred
Cybersecurity risk experience within healthcare, banking, financial services, or another highly regulated industry preferred
Experience operating in a global, acquisition-oriented, or rapidly changing organization preferred

Benefits

Comp & perks

Annual bonus plan with a target of 20.00%
Competitive benefits package
Opportunities to constantly learn, collaborate across groups, and explore new career paths
Meaningful work contributing to communities served around the world
Equal employment opportunity and harassment-free workplace
Reasonable accommodation during the job application process for applicants with disabilities