Hiring for Manager - Governance, Risk & Compliance

Location: Gurgaon (Hybrid)

Looking for Immediate Joiners only.

About the Role

This role is critical to ensuring compliance with HITRUST, HIPAA, and other regulatory requirements while securing healthcare operations and mitigating risks across business, IT, and security domains.

Responsibilities

• HITRUST & HIPAA Compliance Management: Establish and oversee a HITRUST CSF and HIPAA-aligned management system across business processes, applications, IT infrastructure, and security technologies.
• Security & Compliance Documentation: Develop and guide teams in creating security policies, procedures, and controls documentation for HITRUST and HIPAA compliance.
• Regulatory & Compliance Assessments: Review the organization’s HITRUST CSF and HIPAA Security & Privacy controls posture and manage evidence collection for certification and compliance.
• HITRUST & HIPAA Audits: Support and manage internal & external audits for HITRUST CSF certification, HIPAA, and healthcare compliance, ensuring IT and security technologies align with regulatory needs.
• Training & Awareness: Conduct training sessions for internal teams on HITRUST CSF and HIPAA controls, ensuring awareness and adherence to security and privacy regulations.
• Risk Management & Assessments: Collaborate with business, IT, and security teams to drive risk assessments and ensure compliance with HITRUST and HIPAA across applications, infrastructure, and operations.
• Continuous Compliance Monitoring: Ensure ongoing compliance with HITRUST & HIPAA controls by regularly evaluating security and privacy measures across business processes, IT systems, and security infrastructure.
• Contractual & Client Security Compliance: Interpret business contractual security & privacy requirements (Technology & Information Security) to ensure HITRUST & HIPAA-compliant client delivery environments.
• Client & Regulatory Audits: Respond to client security & compliance audits, regulatory reviews, and HITRUST & HIPAA assessments, ensuring timely and effective resolutions.
• Security Risk Communication: Communicate security, privacy risks, vulnerabilities, and compliance assessment findings to senior management and stakeholders, ensuring timely mitigation and governance.

Qualifications

• Strong understanding of HITRUST CSF, HIPAA, HITECH, and security/privacy compliance for business applications, IT systems, and security technologies.
• Good knowledge of IT security technologies.
• Hands-on experience in SOC1, SOC2, HITRUST, or supplier risk management audits.
• Working knowledge of NIST, ISO 27001, and security frameworks for IT and business security alignment.
• 5+ years of experience in security, privacy, and compliance, with preferred 2+ years in HITRUST CSF & HIPAA Compliance.
• Strong analytical, problem-solving, and stakeholder communication skills.

Preferred certifications: CISSP, CISA, CRISC, CISM, HCISPP, CIPP/IT, or equivalent.