Governance & Compliance Lead

TRIARQ Health is a Physician Practice Services company that partners with doctors to run modern patient centred practices so they can be rewarded for delivering high-value care. TRIARQ’s Physician-led partnerships simplify practices’ transition to value-based care by combining our proprietary, cloud-based practice, care management platform and patient engagement services to help doctors focus on better outcomes.

Industry Type: IT-Software, Software Services

Location: Pune / Navi Mumbai / Nashik

Division: US Healthcare Technology

We are seeking a seasoned Governance & Compliance Lead to oversee and coordinate compliance activities across our Pune, Nashik, and Navi Mumbai locations. The successful candidate will play a crucial role in ensuring adherence to internal policies, industry regulations, and ISO 27001 guidelines while leading initiatives to strengthen our governance framework and culture of compliance within the organization.

Key Responsibilities:

• Governance Framework: Develop, implement, and maintain a comprehensive governance framework that aligns with Triarq’s strategic objectives and meets all regulatory requirements, particularly ISO 27001.
• Policy Development and Monitoring: Create, review, and update governance policies, procedures, and guidelines to ensure compliance with applicable laws and regulations, ensuring that they are effectively communicated and disseminated within the organization.
• Compliance Management: Lead compliance initiatives and programs, conducting regular assessments to identify compliance gaps and areas for improvement across all locations (Pune, Nashik, and Navi Mumbai). Risk Assessment: Conduct risk assessments to identify potential areas of compliance vulnerability and risk, recommending mitigation strategies and monitoring their implementation.
• Training and Awareness: Develop and deliver compliance training programs for employees at all levels to foster awareness and understanding of governance and compliance issues, policies, and procedures.
• Audit Coordination: Coordinate internal and external audits regarding governance and compliance matters, ensuring timely responses to audit findings and implementation of corrective actions.
• Reporting: Prepare regular reports on compliance status, issues, and initiatives for senior management and the board of directors, summarizing key risk areas and recommendations for action.
• Cross-Functional Collaboration: Work closely with other departments (IT, Legal, HR, Operations) to ensure alignment of governance and compliance efforts with business objectives and operational practices.
• Stakeholder Engagement: Serve as the primary point of contact for regulatory bodies and external stakeholders regarding governance and compliance matters.

 Qualifications:

• Relevant certifications ISO 27001 (e.g., Certified in Healthcare Compliance, Certified Compliance & Ethics Professional) are preferred. For Eg Certifications like CISA, CIA, and HITRUST CSF Practitioner
• Proven experience in governance, risk management, and compliance, specifically with a focus on ISO 27001 and other relevant regulations.
• Experience in Audits: Experienced in conducting internal audits across People Operations, Support Functions, and Core Operations, with strong presentation and stakeholder management capabilities
• Knowledge: Added advantage if understanding healthcare regulations, compliance frameworks, and industry best practices related to governance and risk management.
• Analytical Skills: Strong analytical and problem-solving skills with the ability to navigate complex regulatory environments and assess potential risks. 
• Communication Skills: Excellent verbal and written communication skills, capable of effectively conveying complex compliance concepts to diverse audiences, from staff to senior management.
• Leadership Skills: Demonstrated leadership abilities with experience in managing cross-functional teams and influencing organizational culture towards compliance.

Preferred Qualifications:

• Proven experience in a compliance field in IT organization or consultancy.
• Familiarity with data protection regulations and security practices, especially related to personal health information.