{bc}
indeed

Cybersecurity Manager

Ensemble Health Partners
IND
Full-time
Hybrid
Discovered 3 weeks ago
Third-party risk management (TPRM)Cybersecurity risk assessmentVendor risk assessmentContract security reviewsCybersecurity governanceRisk remediation governance

Full Job Posting

Role overview

The role provides operational leadership and continuous improvement for the organization's Third-Party Risk Management program.

The manager leads a team responsible for vendor assessments, contract security reviews, continuous monitoring, remediation governance, and risk reporting.

The position partners with business, technology, legal, compliance, privacy, and procurement stakeholders.

People leadership and TPRM operations

  • Lead, coach, and develop team members; manage capacity, workload, resources, recruiting, onboarding, and performance.
  • Oversee vendor assessments, contract security reviews, monitoring, and risk evaluations for quality and consistent methodology.
  • Maintain assessment service levels, remediation tracking, portfolio visibility, and operational goals.
  • Escalate and decide complex risk acceptances, exceptions, compensating controls, remediation plans, and vendor approval recommendations.
  • Review high-risk findings and ensure risk decisions are documented, defensible, and aligned with enterprise risk tolerance.

Program governance and strategic partnership

  • Mature TPRM governance, operating models, methodologies, documentation, policies, standards, procedures, and automation.
  • Coordinate audit and regulatory requests and keep evidence, documentation, and remediation status audit-ready.
  • Incorporate AI-related cybersecurity, privacy, legal, compliance, and operational risk into third-party assessments.
  • Lead program roadmaps and strategic initiatives; coordinate stakeholders and implement or optimize technologies, automation, and reporting.
  • Own executive dashboards, KPIs/KRIs, and portfolio risk reporting; advise leaders and translate technical risk into business recommendations.

Required qualifications

  • Bachelor's degree in a relevant technology or cybersecurity field, or equivalent education and experience.
  • At least 8 years of relevant cybersecurity, risk, governance, compliance, or TPRM experience and 2–3 years of direct people leadership.
  • Experience leading enterprise TPRM or major cybersecurity governance initiatives and teams conducting complex vendor assessments.
  • Experience with executive reporting, performance metrics, strategic communications, policies, standards, and governance processes.
  • Strong TPRM, cybersecurity controls, risk assessment, project management, organizational, analytical, and communication skills.
  • Ability to communicate with technical and executive audiences and balance strategic planning with hands-on delivery.

Preferred certifications

  • One or more of CISSP, CISM, CRISC, CISA, CCSP, or CCSK is preferred.

Location and work arrangement

  • The opportunity description states Hyderabad, India, and identifies the work arrangement as hybrid.

Employer offerings

  • The employer describes healthcare coverage, paid time off, retirement benefits, recognition and wellness programs, competitive pay, certification support, tuition reimbursement, and mentorship.

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Ensemble Health Partners