Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges.As a Principle Security Risk Auditor, your focus will be on the cloud-based integrated and non-integrated in-scope technologies with respect to financial and security control reporting requirements. Your expertise will be instrumental in developing, implementing, and managing a cloud program to safeguard our organization's financial integrity and ensure regulatory compliance in a cloud environment.Primary Responsibilities:
Develop an audit and compliance program for in-scope technologies in and migrating to cloud environments, including AWS, Azure, and Google Cloud Platform (GCP), ensuring compliance with internal policies, industry standards, and General Information Technology Controls (GITCs) and application controls, and regulatory/compliance requirements
Collaborate with cross-functional teams to identify control crossover where repeatable patterns can be within multiple frameworks, such as ISO 27001, SOC 2, GDPR, HIPAA, and PCI DSSReview technology’s processes and controls against industry frameworks, identify gaps in design and execution, and communicate issues and required remediation
Monitor compliance with cloud security standards, regulations, and frameworks. Ensure adherence to security policies
Serve as subject matter expert on cloud-based solutions providing guidance on remediation efforts and/or adopting enterprise solutions
You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.Required Qualifications:
3+ years of experience implementing, monitoring and/or auditing IT general controls for application or platform environments, including cloud-based
2+ years of IT Compliance, Risk Management and/ or IT Audit role experience
2+ years of experience interacting & collaborating with a variety of stakeholders (other team members, internal customers, and executives) and be able to provide measurable results without authority
2+ years of demonstrated knowledge of Agile software development, IT operations and logical security risks
Demonstrated knowledge of cloud computing concepts, architectures, services (e.g., IaaS, PaaS, SaaS), and cloud security best practices, standards, and compliance frameworks
Preferred Qualifications:
Bachelor's degree or equivalent experience
Experience working in or auditing health related business operations
Experience with issuing Service Organization Controls (SOC) reports or holds a professional certification such as CISA, CISM, CISSP, CCSP, or AWS Certified Security - Specialty
Experience working with Mergers and Acquisitions or Non-Integrated Business Partners
Hands-on experience in the multiple areas of IT audits, ICFR/SOC, IT Financial Audit and Business Automated Controls, IT Risk consulting or any other regulatory /compliance audits
Knowledge of regulatory requirements and frameworks such as SOX, COSO, and NIST pertaining to financial reporting and cloud security
All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter PolicyCalifornia, Colorado, Connecticut, Hawaii, Nevada, New Jersey, New York, Rhode Island, or Washington Residents Only: The salary range for this role is $104,700 to $190,400 annually. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. UnitedHealth Group complies with all minimum wage laws as applicable. In addition to your salary, UnitedHealth Group offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with UnitedHealth Group, you’ll find a far-reaching choice of benefits and incentives.Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.