Director, GRC Transformation and Enablement- Remote or Hybrid in MN or DC
About The Position
The Director, GRC Operating Model & Transformation Enablement leads enterprise-scale change, adoption, and operationalization required to embed cyber, technology, and AI risk management into how UnitedHealth Group operates day to day. This role sits within the team responsible for defining and owning the enterprise GRC operating model and the platforms that power it, leading the design, build, and continuous evolution of integrated GRC tools that embed risk, policy, and control execution directly into technology and business workflows. This role is accountable for driving people, process, technology, and behavioral change to ensure new GRC capabilities are not only implemented, but consistently adopted, sustained, and producing measurable risk reduction and compliance outcomes across cyber, technology, and business teams. It is an execution-focused leadership role that bridges strategy and operations—ensuring platform-led GRC transformation translates into durable, scalable ways of working across a highly matrixed, regulated environment.
Requirements
- Bachelor’s degree or equivalent experience (e.g., 4+ years of additional experience in enterprise technology, risk, or compliance in lieu of a degree)
- 15+ years of experience across enterprise technology, risk, compliance
- 7+ years of experience in senior leadership roles driving change across large, matrixed organizations
- 5+ years of experience operating in highly regulated environments (such as healthcare, insurance, or financial services)
- 4+ years leading GRC operating model and tool transformation, end-to-end ownership of GRC solutions
Nice To Haves
- Advanced degree (such as an MBA or MS in Business, Technology, Risk Management, or related field)
- Professional certifications such as CRISC, CISA, CISSP, CISM, SAFe, Agile, or Prosci
- Deep understanding of enterprise change leadership, organizational acumen, and systems thinking across policy, risk, control, and platforms
- Proven success leading enterprise adoption where authority is indirect
- Outstanding executive influence and communication skills, with a track record of partnering with senior leaders across cyber, tech, and business
Responsibilities
- Lead enterprise change management and adoption strategy for cyber, technology, and AI risk initiatives, translating GRC objectives into clear, role based expectations
- Operationalize the Cyber & Technology Risk operating model across policy, risk, control, and enablement pillars
- Embed risk, control, and policy execution into technology delivery lifecycles, business planning processes, and remediation workflows
- Define role clarity, decision rights, and accountability models to execute GRC consistently at scale across business units and lines of defense
- Partner with leaders, HR, and enablement teams to build risk, control, and accountability fluency across the enterprise
- Establish adoption and maturity indicators tied to cycle time, remediation performance, audit readiness, and residual risk reduction
- Execute and track multi year GRC transformation roadmaps with clear milestones, dependencies, and outcomes
- Partner with senior leaders to provide visibility into adoption, operational maturity, and execution risks while supporting defensible risk decisions
- Use enterprise-approved AI tools to streamline workflows, automate tasks, and drive continuous improvement
- Evaluate emerging trends to inform solution design and strategic innovation
Benefits
- comprehensive benefits package
- incentive and recognition programs
- equity stock purchase
- 401k contribution
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
