Join one of the nation’s leading and most impactful health care performance improvement companies. Over the years, Health Catalyst has achieved and documented clinical, operational, and financial improvements for many of the nation’s leading healthcare organizations. We are also increasingly serving international markets. Our mission is to be the catalyst for massive, measurable, data-informed healthcare improvement through:

·Data: integrate data in a flexible, open & scalable platform to power healthcare’s digital transformation

·Analytics: deliver analytic applications & services that generate insight on how to measurably improve

·Expertise: provide clinical, financial & operational experts who enable & accelerate improvement

·Engagement: attract, develop and retain world-class team members by being a best place to work

Our Mission is to be the catalyst for massive, measurable, data-informed healthcare improvement.

How You Can Make a Difference In this role, you will make a difference by establishing Health Catalyst's offshore GRC presence in India and helping shape how the function scales. As the first dedicated offshore GRC leader, you will partner closely with U.S.-based GRC leadership, control owners, and cross-functional stakeholders to strengthen audit readiness, improve evidence quality, and mature core GRC processes. You will be expected to operate with initiative in ambiguous situations, identify gaps without waiting to be prompted, and bring practical, creative solutions that improve consistency, accountability, and control effectiveness.

Over time, you will build and lead a team that supports customer risk assessments, policy and procedure governance, automated evidence collection, and continuous improvement across the GRC program.

What You'll Be Doing

As the GRC Manager, Offshore Team Lead, you will establish and lead Health Catalyst's offshore Governance, Risk & Compliance function in India. As the first dedicated offshore GRC leader, you will work closely with U.S.-based leadership to strengthen audit readiness, improve evidence management practices, mature policy governance processes, and support customer assurance activities. You will help define how the offshore function operates, create scalable processes, and build a high-performing team that serves as a trusted extension of the broader GRC organization.

Key Responsibilities

- Establish and help scale Health Catalyst's offshore GRC function in India, including supporting the definition of team structure, operational processes, onboarding plans, and performance expectations.




- Provide day-to-day leadership, coaching, and guidance to offshore team members while fostering a culture of accountability, quality, collaboration, and continuous improvement.
- Track, analyze, and report key performance indicators (KPIs) related to customer risk assessments, evidence management, policy governance, and other GRC operational activities.
- Review evidence submissions to ensure accuracy, completeness, relevance, and audit readiness before they are utilized for audits, customer assessments, or compliance reporting.
- Partner closely with U.S.-based GRC leadership to align priorities, communicate progress, address challenges, and ensure consistency across global operations.
- Evaluate existing GRC processes, identify opportunities for improvement, and implement solutions that enhance efficiency, consistency, scalability, and control effectiveness.

Qualifications

- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Business, or a related field, or equivalent professional experience.
- 5+ years of experience in Governance, Risk & Compliance, Information Security, Audit, or related disciplines.
- Demonstrated experience leading teams, projects, or operational functions within a compliance or security environment.
- Strong understanding of HITRUST, SOC 2, ISO 27001, NIST, and related governance and compliance frameworks.
- Strong Communication skills with the ability to speak to technical and non-technical stakeholders about compliance frameworks
- One or more of the following certifications required- HITRUST CCSFP, CISM, CRISC, or similar

Leadership & Success Attributes
- Comfortable navigating ambiguity and changing priorities while maintaining focus on business objectives and deliverables.
- Strong critical-thinking and analytical skills with the ability to assess problems, identify root causes, and recommend practical solutions.
- Self-starter who demonstrates initiative, accountability, and a willingness to take ownership beyond formally assigned responsibilities when needed.
- Demonstrated track record of closing out audits and remediation efforts, from findings to final sign-off.




- Takes ownership of delegated work end to end, keeping leadership updated at key milestones through completion.
- Actively looks for ways to apply AI and automation to cut manual work, from evidence gathering to routine reporting, and redirects that time toward higher-value risk analysis.
- Builds working relationships with internal and external stakeholders, and uses that network to move objectives through teams and channels outside this role's direct control.

Preferred Skills

- Experience with GRC platforms (Anecdotes or similar).
- Familiarity with policy management tools and audit processes.
- Knowledge of cloud environments and SaaS security principles.

Success Metrics & KPIs
- Team Leadership & Development: Successfully establish and scale the offshore GRC function, including onboarding, training, and development of team members.
- Customer Risk Assessments: Achieve greater than 95% on-time delivery of assigned customer assurance requests.
- Policy & Procedure Governance: Ensure 100% of in-scope policies are reviewed within required review cycles.
- Audit & Evidence Management: Achieve less than 5% evidence rejection or resubmission rate due to quality, completeness, or relevance issues.
- Operational Excellence & Continuous Improvement: Identify, document, and implement at least one meaningful process improvement initiative per quarter.
- Stakeholder Partnership: Establish trusted working relationships with leadership, control owners, and stakeholders.
- Problem Solving & Ownership: Proactively identify risks, process gaps, and operational challenges and develop practical solutions.
- Strategic Contribution: Contribute recommendations that improve GRC program maturity, audit readiness, scalability, and operational effectiveness.

Why Join Us?

- Lead a growing offshore GRC team and shape its success.
- Work with up-to-date compliance automation tools.
- Collaborate with global teams on strategic governance initiatives.

Equal Employment Opportunity has been, and will continue to be, a fundamental principle at Health Catalyst, where employment is based upon personal capabilities and qualification without discrimination or harassment on the basis of race, color, national origin, religion, sex, sexual orientation, gender identity, age, disability, citizenship status,

marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law. Health Catalyst is committed to a work environment where all individuals are treated with respect and dignity.

📌 Governance Risk and Compliance Lead/Manager (Hyderabad)
🏢 Health Catalyst
📍 Hyderabad