Manager, Cybersecurity Governance Risk & Compliance

Thank you for considering a career at Ensemble!

Ensemble is a leading provider of technology-enabled revenue cycle management solutions for health systems, including hospitals and affiliated physician groups. They offer end-to-end revenue cycle solutions as well as a comprehensive suite of point solutions to clients across the country.

Ensemble keeps communities healthy by keeping hospitals healthy. We recognize that healthcare requires a human touch, and we believe that every touch should be meaningful. This is why our people are the most important part of who we are. By empowering them to challenge the status quo, we know they will be the difference!

O.N.E Purpose:

• Customer Obsession: Consistently provide exceptional experiences for our clients, patients, and colleagues by understanding their needs and exceeding their expectations.

• Embracing New Ideas: Continuously innovate by embracing emerging technology and fostering a culture of creativity and experimentation.

• Striving for Excellence: Execute at a high level by demonstrating our “Best in KLAS” Ensemble Difference Principles and consistently delivering outstanding results.

The Opportunity:

Job Summary

The Cybersecurity Manager – Third-Party Risk Management (TPRM) is responsible for the operational leadership, effectiveness, and continuous maturation of the organization's Third-Party Risk Management program. Working closely with the Director of TPRM, this role leads a team responsible for vendor risk assessments, contract security reviews, continuous monitoring, remediation governance, and risk reporting activities.

The Manager is accountable for team performance, assessment quality, risk-based decision making, stakeholder engagement, executive reporting, and successful execution of strategic initiatives. This role serves as a key partner to business, technology, legal, compliance, privacy, and procurement stakeholders to ensure vendor risks are identified, evaluated, and managed consistently across the organization.

The ideal candidate is an experienced people leader who thrives in a fast-paced environment, can effectively influence cross-functional stakeholders, and is passionate about building scalable, sustainable cybersecurity and risk management capabilities.

Essential Job Functions

Team Leadership & Development

• Provide day-to-day leadership, guidance, and oversight for TPRM team members
• Coach, mentor, and develop team members through performance feedback, career development planning, training opportunities, and formal performance evaluations.
• Manage team capacity, workload prioritization, resource allocation, and operational challenges to ensure timely delivery of assessments, contract reviews, strategic initiatives, and departmental objectives.
• Accountable for team performance, service delivery metrics, quality standards, and achievement of operational goals.
• Lead recruiting, interviewing, onboarding, and performance management activities.
• Identify staffing, skillset, and resource needs to support current operations and future program growth.
• Foster a culture of accountability, collaboration, innovation, and continuous improvement.

Third-Party Risk Management Operations

• Provide operational oversight and quality assurance for third-party risk assessments, contract security reviews, continuous monitoring activities, and risk evaluations, ensuring consistent application of established methodologies and quality standards.
• Own the operational health of the enterprise third-party portfolio by ensuring assessment service levels, continuous monitoring, remediation tracking, and executive visibility objectives are achieved.
• Serve as the primary escalation point for complex vendor risk decisions, including risk acceptances, exceptions, compensating controls, remediation plans, and vendor approval recommendations.
• Provide oversight for contract security reviews and ensure risk-based recommendations for vendor approvals, exceptions, and escalations.
• Review and approve high-risk assessment findings, risk ratings, remediation recommendations, and exception requests to ensure consistency with enterprise risk standards.
• Ensure vendor risk decisions and recommendations are documented, defensible, and aligned with enterprise risk tolerance.
• Collaborate with business stakeholders on critical vendor engagements and initiatives.

Program Development & Governance

• Lead continuous maturation of the Third-Party Risk Management program through improvements to governance processes, operating models, methodologies, documentation standards, and automation capabilities.
• Develop, maint