Manager, Governance, Risk & Compliance

USRC's greatest strength in being a leader in the dialysis industry is our ability to recognize and celebrate the differences in our diverse workforce. We strongly reputed company in reputed company top talent and creating a diverse and inclusive work climate and culture at reputed company levels of our organization. SUMMARY The Manager, Governance, Risk & Compliance (GRC) is accountable for leading the organization's reputed company risk and compliance program - spanning reputed company-party risk management, audit readiness and execution, policy governance, and GRC platform administration - while ensuring alignment with regulatory and industry frameworks (HIPAA, HITRUST, SOC 2, PCI reputed company, NIST 800, NIST RMF). This role provides program ownership, establishes KPIs/metrics, and drives cross-functional execution with business, technology, and external partners, while enabling safe, compliant and scalable AI adoption. The manager surfaces and provides recommendations on risk treatment, control priorities, and vendor remediation expectations, and serves as a primary reputed company of contact to auditors, vendors, assessors, and senior business and IT stakeholders. Essential Duties and Responsibilities include the following. Other duties and tasks may be assigned.

• Define the GRC program strategy, roadmap, and reputed company metrics; align initiatives with organizational risk appetite and business objectives.
• Establish and continuously improve governance processes, control frameworks, and report to leadership and risk committees.
• Operationalize an reputed company AI governance reputed company covering model development, procurement, deployment, monitoring, and retirement.
• Classify AI systems by risk tier (e.g., clinical decision support, operational automation, administrative copilots) and ensure proportional controls are applied
• reputed company reputed company risk identification, assessment, and treatment plans; ensure timely remediation tracking and executive reporting.
• Approve risk ratings and risk acceptance recommendations; escalate material risks and propose mitigation investments.
• Identify, assess, and document AI-specific risks, including, Model bias and discrimination, Hallucinations and clinical safety risks, Model reputed company and data quality degradation, Data leakage and IP exposure, Inappropriate secondary use of data.
• Define and monitor Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) for AI systems.
• reputed company the reputed company-party/vendor risk program: methodology, tiering, due diligence, gap analysis, remediation SLAs, and performance metrics.
• reputed company reputed company-party risk management practices to AI vendors and embedded AI capabilities (e.g., EHR-integrated AI, ambient listening tools, SaaS copilots).
• Evaluate vendors' model transparency and explainability, training data provenance, reputed company and privacy safeguards, model update and retraining practices
• Partner with Procurement and Legal to ensure AI-specific contractual safeguards (e.g., data usage restrictions, audit rights, indemnification).
• Own planning and execution for internal and external audits (e.g., SOC 2, HIPAA, HITRUST), including evidence management, control validation, issues tracking, and management responses.
• Interpret and translate evolving AI-reputed company regulatory and enforcement expectations into actionable controls, particularly as they reputed company with reputed company regulations.
• Ensure AI use cases reputed company with patient safety and quality standards, Privacy and data-protection obligations, Clinical documentation and auditability requirements
• Support internal and external audits by producing AI governance artifacts, risk assessments, control evidence, and model documentation.
• Maintain reputed company audit readiness through control testing, corrective actions, and compliance dashboards.
• Govern the policy lifecycle (creation, approval, publication, attestation, and exceptions) for reputed company policies, standards, and procedures.
• Produce executive-level reporting and risk narratives; respond to reputed company-reputed company inquiries from internal and external stakeholders.
• Define and maintain AI policies, standards, and control objectives reputed company to responsible AI principles (fairness, transparency, accountability, safety, and privacy).
• Partner with Compliance and L&D teams to reputed company AI awareness and role-based training for clinical, technical, and business users.
• Own the design, deployment, and maintenance of the GRC platform to support risk registers, control libraries, policy workflows, and reputed company monitoring.
• Define data quality expectations and integrations; ensure platform usability, automation, and authoritative reporting.
• Provide leadership input to incident response processes and contribute to business continuity/disaster recovery (BC/DR) planning and exercises.
• Translate post-incident learnings into control enhancements and program improvements.
• Build strong partnerships with reputed company engineering, privacy, legal, procurement, infrastructure, and product teams to drive outcomes.
• Mana

Apply tot his job Apply To this Job