Job description

Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through: Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation Analytics: deliver analytic applications & services that generate insight on how to measurably improve Expertise: provide clinical, financial & operational experts who enable & accelerate improvement Engagement: attract, develop and retain world-class team members by being a best place to work Reports To GRC Manager (U.S.) Location India (Hyperbad or Punjab) Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through: · Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation · Analytics: deliver analytic applications & services that generate insight on how to measurably improve · Expertise: provide clinical, financial & operational experts who enable & accelerate improvement · Engagement: attract, develop and retain world-class team members by being a best place to work Our Mission is to be the catalyst for massive, measurable, data-informed healthcare improvement. How You Can Make a Difference In this role, you will make a difference by establishing Health Catalyst s offshore GRC presence in India and helping shape how the function scales. As the first dedicated offshore GRC leader, you will partner closely with U.S.-based GRC leadership, control owners, and cross-functional stakeholders to strengthen audit readiness, improve evidence quality, and mature core GRC processes. You will be expected to operate with initiative in ambiguous situations, identify gaps without waiting to be prompted, and bring practical, creative solutions that improve consistency, accountability, and control effectiveness. Over time, you will build and lead a team that supports customer risk assessments, policy and procedure governance, automated evidence collection, and continuous improvement across the GRC program. What You ll Be Doing As the GRC Manager, Offshore Team Lead, you will establish and lead Health Catalyst s offshore Governance, Risk & Compliance function in India. As the first dedicated offshore GRC leader, you will work closely with U.S.-based leadership to strengthen audit readiness, improve evidence management practices, mature policy governance processes, and support customer assurance activities. You will help define how the offshore function operates, create scalable processes, and build a high-performing team that serves as a trusted extension of the broader GRC organization. Key Responsibilities Establish and help scale Health Catalyst s offshore GRC function in India, including supporting the definition of team structure, operational processes, onboarding plans, and performance expectations. Provide day-to-day leadership, coaching, and guidance to offshore team members while fostering a culture of accountability, quality, collaboration, and continuous improvement. Track, analyze, and report key performance indicators (KPIs) related to customer risk assessments, evidence management, policy governance, and other GRC operational activities. Review evidence submissions to ensure accuracy, completeness, relevance, and audit readiness before they are utilized for audits, customer assessments, or compliance reporting. Partner closely with U.S.-based GRC leadership to align priorities, communicate progress, address challenges, and ensure consistency across global operations. Evaluate existing GRC processes, identify opportunities for improvement, and implement solutions that enhance efficiency, consistency, scalability, and control effectiveness. Qualifications Bachelor s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Business, or a related field, or equivalent professional experience. 5 years of experience in Governance, Risk & Compliance, Information Security, Audit, or related disciplines. Demonstrated experience leading teams, projects, or operational functions within a compliance or security environment. Strong understanding of HITRUST, SOC 2, ISO 27001, NIST, and related governance and compliance frameworks. Strong Communication skills with the ability to speak to technical and non-technical stakeholders about compliance frameworks One or more of the following certifications required- HITRUST CCSFP, CISM, CRISC, or similar Leadership & Success Attributes Comfortable navigating ambiguity and changing priorities while maintaining focus on business objectives and deliverables. Strong critical-thinking and analytical skills with the ability to assess problems, identify root causes, and recommend practical solutions. Self-starter who demonstrates initiative, accountability, and a willingness to take ownership beyond formally assigned responsibilities when needed. Demonstrated track record of closing out audits and remediation efforts, from findings to final sign-off. Takes ownership of delegated work end to end, keeping leadership updated at key milestones through completion. Actively looks for ways to apply AI and automation to cut manual work, from evidence gathering to routine reporting, and redirects that time toward higher-value risk analysis. Builds working relationships with internal and external stakeholders, and uses that network to move objectives through teams and channels outside this role s direct control. Preferred Skills Experience with GRC platforms (Anecdotes or similar). Familiarity with policy management tools and audit processes. Knowledge of cloud environments and SaaS security principles. Success Metrics & KPIs Team Leadership & Development: Successfully establish and scale the offshore GRC function, including onboarding, training, and development of team members. Customer Risk Assessments: Achieve greater than 95% on-time delivery of assigned customer assurance requests. Policy & Procedure Governance: Ensure 100% of in-scope policies are reviewed within required review cycles. Audit & Evidence Management: Achieve less than 5% evidence rejection or resubmission rate due to quality, completeness, or relevance issues. Operational Excellence & Continuous Improvement: Identify, document, and implement at least one meaningful process improvement initiative per quarter. Stakeholder Partnership: Establish trusted working relationships with leadership, control owners, and stakeholders. Problem Solving & Ownership: Proactively identify risks, process gaps, and operational challenges and develop practical solutions. Strategic Contribution: Contribute recommendations that improve GRC program maturity, audit readiness, scalability, and operational effectiveness. Why Join Us? Lead a growing offshore GRC team and shape its success. Work with modern compliance automation tools. Collaborate with global teams on strategic governance initiatives. The above statements describe the general nature and level of work being performed in this job function. They are not intended to be an exhaustive list of all duties, and indeed additional responsibilities may be assigned by Health Catalyst . Studies show that candidates from underrepresented groups are less likely to apply for roles if they don’t have 100% of the qualifications shown in the job posting. While each of our roles have core requirements, please thoughtfully consider your skills and experience and decide if you are interested in the position. If you feel you may be a good fit for the role, even if you don’t meet all of the qualifications, we hope you will apply. If you feel you are lacking the core requirements for this position, we encourage you to continue exploring our careers page for other roles for which you may be a better fit. At Health Catalyst, we appreciate the opportunity to benefit from the diverse backgrounds and experiences of others. Because of our deep commitment to respect every individual, Health Catalyst is an equal opportunity employer.

Requirements

Must-haves

Analytics: deliver analytic applications & services that generate insight on how to measurably improve
Expertise: provide clinical, financial & operational experts who enable & accelerate improvement
Engagement: attract, develop and retain world-class team members by being a best place to work
Reports To GRC Manager (U.S.)
Location India (Hyperbad or Punjab)
Provide day-to-day leadership, coaching, and guidance to offshore team members while fostering a culture of accountability, quality, collaboration, and continuous improvement.
Track, analyze, and report key performance indicators (KPIs) related to customer risk assessments, evidence management, policy governance, and other GRC operational activities.
Review evidence submissions to ensure accuracy, completeness, relevance, and audit readiness before they are utilized for audits, customer assessments, or compliance reporting.
Partner closely with U.S.-based GRC leadership to align priorities, communicate progress, address challenges, and ensure consistency across global operations.
Evaluate existing GRC processes, identify opportunities for improvement, and implement solutions that enhance efficiency, consistency, scalability, and control effectiveness.
Qualifications Bachelor s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Business, or a related field, or equivalent professional experience.
5 years of experience in Governance, Risk & Compliance, Information Security, Audit, or related disciplines.
Demonstrated experience leading teams, projects, or operational functions within a compliance or security environment.
Strong understanding of HITRUST, SOC 2, ISO 27001, NIST, and related governance and compliance frameworks.
Strong Communication skills with the ability to speak to technical and non-technical stakeholders about compliance frameworks
One or more of the following certifications required- HITRUST CCSFP, CISM, CRISC, or similar
Leadership & Success Attributes Comfortable navigating ambiguity and changing priorities while maintaining focus on business objectives and deliverables.
Strong critical-thinking and analytical skills with the ability to assess problems, identify root causes, and recommend practical solutions.
Self-starter who demonstrates initiative, accountability, and a willingness to take ownership beyond formally assigned responsibilities when needed.
Demonstrated track record of closing out audits and remediation efforts, from findings to final sign-off.
Takes ownership of delegated work end to end, keeping leadership updated at key milestones through completion.
Actively looks for ways to apply AI and automation to cut manual work, from evidence gathering to routine reporting, and redirects that time toward higher-value risk analysis.
Builds working relationships with internal and external stakeholders, and uses that network to move objectives through teams and channels outside this role s direct control.

Nice-to-haves

Preferred Skills Experience with GRC platforms (Anecdotes or similar).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: workday
Effort: long