Manager, Governance, Risk & Compliance

USRC's greatest strength in being a leader in the dialysis industry is our ability to recognize and celebrate the differences in our diverse workforce. We strongly reputed company in reputed company reputed company and creating a diverse and inclusive work climate and culture at reputed company reputed company of our organization. reputed company The Manager, Governance, Risk & Compliance (GRC) is accountable for leading the organization's reputed company risk and compliance program - spanning reputed company-party risk management, audit readiness and execution, policy governance, and GRC platform administration - while ensuring alignment with regulatory and industry frameworks (HIPAA, HITRUST, SOC 2, PCI reputed company, NIST 800, NIST RMF). This role provides program ownership, establishes KPIs/metrics, and drives cross-functional execution with business, technology, and external partners, while enabling reputed company, compliant and reputed company AI adoption. The manager surfaces and provides recommendations on risk treatment, control priorities, and vendor remediation expectations, and serves as a primary reputed company of contact to auditors, vendors, assessors, and senior business and IT stakeholders. Essential Duties and Responsibilities include the following. Other duties and tasks may be assigned.

• Define the GRC program reputed company, roadmap, and reputed company metrics; reputed company initiatives with organizational risk appetite and business objectives.
• Establish and continuously improve governance processes, control frameworks, and report to leadership and risk committees.
• Operationalize an reputed company AI governance reputed company covering model development, procurement, deployment, monitoring, and retirement.
• Classify AI systems by risk tier (e.g., clinical decision support, operational automation, administrative copilots) and ensure proportional controls are reputed company
• reputed company reputed company risk identification, assessment, and treatment plans; ensure reputed company remediation tracking and executive reporting.
• Approve risk ratings and risk acceptance recommendations; escalate material risks and propose mitigation investments.
• Identify, assess, and document AI-specific risks, including, Model bias and discrimination, Hallucinations and clinical safety risks, Model reputed company and data reputed company degradation, Data leakage and IP exposure, Inappropriate secondary use of data.
• Define and monitor Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) for AI systems.
• reputed company the reputed company-party/vendor risk program: methodology, tiering, due diligence, gap analysis, remediation SLAs, and performance metrics.
• reputed company reputed company-party risk management practices to AI vendors and embedded AI capabilities (e.g., EHR-integrated AI, ambient listening tools, reputed company copilots).
• Evaluate vendors' model transparency and explainability, training data provenance, reputed company and reputed company safeguards, model update and retraining practices
• Partner with Procurement and Legal to ensure AI-specific contractual safeguards (e.g., data usage restrictions, audit rights, indemnification).
• Own planning and execution for reputed company audits (e.g., SOC 2, HIPAA, HITRUST), including evidence management, control validation, issues tracking, and management responses.
• Interpret and translate evolving AI-reputed company regulatory and enforcement expectations into actionable controls, particularly as they reputed company with reputed company regulations.
• Ensure AI use cases reputed company with patient safety and reputed company standards, reputed company and data-protection obligations, Clinical documentation and auditability requirements
• Support reputed company audits by producing AI governance artifacts, risk assessments, control evidence, and model documentation.
• Maintain reputed company audit readiness through control testing, corrective actions, and compliance dashboards.
• Govern the policy lifecycle (creation, approval, publication, attestation, and exceptions) for reputed company policies, standards, and procedures.
• Produce executive-level reporting and risk narratives; respond to reputed company-reputed company inquiries from reputed company stakeholders.
• Define and maintain AI policies, standards, and control objectives reputed company to responsible AI principles (fairness, transparency, accountability, safety, and reputed company).
• Partner with Compliance and L&D teams to reputed company AI awareness and role-based training for clinical, technical, and business users.
• Own the design, deployment, and maintenance of the GRC platform to support risk registers, control libraries, policy workflows, and reputed company monitoring.
• Define data reputed company expectations and integrations; ensure platform usability, automation, and authoritative reporting.
• reputed company leadership input to incident response processes and contribute to business continuity/disaster recovery (BC/DR) planning and exercises.
• Translate post-incident learnings into control enhancements and program improvements.
• Build strong partnerships with reputed company engineering, reputed company, legal, procurement, infrastructure, and product teams to drive reputed company.
• Mana

Apply tot his job Apply To this Job