Director, Security Trust Office - On Site MN

UnitedHealth Group•Eden Prairie, MN

2d•$134,600 - $230,800•Onsite

About The Position

The Director, Security Trust Office is a senior technical authority in Optum’s Enterprise Security Office, responsible for advancing market trust, enterprise transparency, and security partnership across the healthcare ecosystem. The role develops and leads the enterprise security trust vision and multi-year strategy, aligning security posture with business growth objectives and regulatory standards. The position works with executive leadership, client account teams, customers, auditors, and industry partners to establish a scalable Trust Office framework and address complex security inquiries, risk assessments, sales processes, audits, and contractual reviews. It translates technical security architectures and compliance maturity for external audiences, regulatory bodies, and strategic business partners, supporting sales enablement, customer confidence, and regulatory alignment. The role also oversees trust-related documentation and reporting, and serves as the ultimate technical escalation point for high-stakes client security matters. This role is scheduled to work on site four days per week. The stated annual salary range is $134,600–$230,800, based on full-time employment.

Requirements

12 or more years of progressive technical experience in information security, risk management, or cybersecurity compliance.
7 or more years of experience collaborating with cross-functional executive teams and driving enterprise-level security programs.
5 or more years of experience leading high-stakes technical customer security reviews, enterprise risk assessments, and executive-level RFP negotiations.
5 or more years of experience designing, building, or scaling an enterprise Security Trust Office, Trust Center, or customer security framework.
Demonstrated experience communicating complex cybersecurity concepts and risk metrics directly to executive leadership, board members, and external client leadership.
In-depth mastery of enterprise security frameworks such as NIST CSF and ISO 27001, data privacy laws such as GDPR, CCPA, and HIPAA, and global compliance standards.

Nice To Haves

Master’s degree in Information Security, Computer Science, Business Administration, or a related technical field.
Active industry certification such as CISSP, CISM, CISA, or CRISC.
Proven experience implementing enterprise automated trust platforms, NDA automation tools, and security questionnaire systems.
Deep domain expertise in healthcare cybersecurity regulations such as HITRUST, HIPAA Security Rule, and FedRAMP.

Responsibilities

Formulate and execute the enterprise security trust vision and multi-year strategy, aligning technical security posture with business growth targets and regulatory standards.
Partner with executive leadership across the enterprise to establish and govern a scalable Trust Office framework for client security inquiries and risk assessments.
Drive strategic sales enablement by partnering with executive client account teams on complex security commitments during major RFP, contracting, and vendor evaluation processes.
Represent the Trust Office as a strategic technical authority during critical incident response engagements and executive client meetings.
Establish and maintain strategic relationships with enterprise customers, auditors, and key industry partners to articulate the organization’s security posture and compliance maturity.
Evaluate emerging global cybersecurity threats, industry shifts, and regulatory mandates, and recommend proactive enterprise-wide measures.
Direct technical strategy and oversight for high-priority client security responses, assessments, audits, RFPs, and contractual security reviews.
Serve as the ultimate technical escalation point for enterprise Trust Office issues and high-stakes client security inquiries.
Prepare and deliver strategic security trust briefings, metrics, and risk reports to executive leadership and board-level committees.
Oversee the integrity and accuracy of client-facing security documentation, audit collateral, and internal and external trust portals.