Looking For GRC Manager - Hyderabad

JD for GRC Manager/Lead We are a team of passionate individuals using technology and services to solve the challenges faced by care providers in delivering efficient and effective healthcare. We are looking for a strong Governance, Risk, and Compliance (GRC) Manager/Lead with a passion and compassion for Healthcare to join our team. We are looking at your demonstrated capability of driving the responsibilities of compliance for a world-class organization.

You will be joining a global technology services organization delivering services across US, UK, Africa, SEA, UAE, and Australia regions. You will be working with teams that build solutions catering to hospitals and other healthcare providers across multiple geographies, with a focus on establishing a robust, proactive, and scalable compliance posture.

A successful GRC Manager/Lead at HAPL is a self-starter with a growth mindset, an individual contributor who can collaborate effectively with the team, and an expert with a passion to learn, explore, and experiment with new GRC and automation tools and platforms.

Required Skills Set:

• A Bachelors or Masters Degree from a reputed university.
• Achievements separating you from the rest (Certifications, speaking engagements, publications, etc.).
• Strong foundations in IT governance frameworks and risk management.
• Deep expertise in international healthcare and IT regulations, including ISO 27001, HIPAA, GDPR, CIS 18, Cyber Essentials Plus, and the path to achieving HITRUST.
• Experience in designing and implementing an Automation-First compliance program.
• Experience in evaluating and implementing a unified Governance, Risk, and Compliance (GRC) platform.
• Excellent problem-solving, critical thinking, and communication skills with the ability to translate complex regulatory requirements into actionable plans. As a GRC Manager/Lead
• You will own the strategic framework and operational roadmap for HAPL's global compliance program.
• You will be responsible for the end-to-end management of compliance certifications, including planning, documentation, and coordination with third-party auditors.
• You will manage all aspects of audit and auditor management, including liaising with internal and external auditors, coordinating audit schedules, preparing teams for audit readiness, and overseeing the collection and submission of evidence.
• You will be responsible for conducting vendor risk assessments, which includes developing and maintaining a vendor due diligence program, performing security and compliance reviews, and managing ongoing risk monitoring for third-party partners.
• You will be working with teams to embed the principles of Compliance by Design and Centralized Governance into all services and infrastructure.
• You will be responsible for defining and tracking key compliance metrics such as Compliance Posture Score, Control Effectiveness, and Time-to-Remediate.
• You will manage the integration of existing controls (e.g., ISO 27001, HIPAA) into a GRC platform for automated, continuous monitoring.
• You will collaborate with various teams to ensure adherence to standards and the timely closure of identified compliance gaps.
• You will be responsible for evaluating and implementing a unified GRC platform to create a continuous, low-touch, and automated compliance engine.
• You will document your technical work and research to help your colleagues, improve the process, and improve the overall compliance posture.