Info Security Risk Consultant - IT Security or Audit and ITGC Controls

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.

This position is responsible for leading the execution of IT risk assessments and security consulting activities to assess the design, effectiveness and efficiency of IT controls and compliance applicable laws and regulations for the business.

Primary Responsibilities:

• Leads projects with minimal supervision and demonstrates technical proficiency for assigned assessments
• Participates in walk-throughs, identifies and documents risks and controls and obtains evidence as applicable
• Executes scoping and planning activities, performs detailed procedures and develops final report
• Anticipates customer needs and proactively develops solutions to meet them
• Provides explanations and information to others on complex issues and performs complex conceptual analysis
• Taking ad hoc activities to continuously improve the program
• Works with team member to develop test steps, when applicable
• Works with business partners to present and validate potential issues and IT security risks and facilitates the development of appropriate remediation plans
• Lead and participates on special projects undertaken by the department
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications:

• 4+ years of relevant IT and audit experience is a must
• 4+ years of experience auditing ITGC controls
• 3+ years of understanding of IT security and internal control concepts and their practical application
• 3+ years of understanding and background in Compliance, Risk and Governance
• 3+ years of working knowledge of applicable security standards and regulations e.g. PCI-DSS, GDPR, HIPAA, ISO 27001, HITRUST, NIST
• Health or related insurance experience
• Good co-ordination and planning skills and the ability to manage projects independently
• Proven excellent communication and presentation skills
• Willing to work on US office hours
• Solid interpersonal skills while working effectively with a team
• Solid oral and written communication skills
• Desire to make a positive impact with the ability to manage multiple tasks and shift priorities
• Resourceful
• Solid oral and written communication skills

Preferred Qualification:

• CISSP, CISA or ISO27001 Lead Implementer or Lead Auditor certification

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.

Diversity creates a healthier atmosphere: Optum is an Equal Employment Opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

Optum is a drug-free workplace. 2024 Optum Global Solutions (Philippines) Inc. All rights reserved.