Principal Cybersecurity Analyst - Remote

UnitedHealth Group•Eden Prairie, MN

1d•$112,700 - $193,200•Remote

About The Position

The Prin Cybersecurity Anlyst serves as a key architect and operational leader responsible for designing, building, evolving, and maintaining the enterprise cybersecurity integration program for acquired entities. This individual contributor role partners across ESRO, Security Engineering, PMO, Technology, and Acquired Entity leadership to develop scalable cybersecurity integration strategies, playbooks, operating models, governance frameworks, and repeatable implementation approaches that accelerate risk reduction and cybersecurity maturity across acquisitions. The role combines strategic program design with hands-on execution leadership to continuously improve how acquired entities are assessed, integrated, transformed, and transitioned into enterprise cybersecurity services. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Requirements

Bachelor's degree or equivalent experience
10+ years of cybersecurity, infrastructure, or enterprise technology experience
5+ years of cybersecurity implementation or security engineering experience
3+ years supporting acquisitions, integrations, or non-integrated entities
3+ years developing operational processes, playbooks, or transformation methodologies
3+ years leading cross-functional initiatives and technology deployments
Experience with endpoint security, vulnerability remediation, asset management, or enterprise security tooling
Experience translating technical implementation activities into scalable, repeatable integration models
Proven solid analytical, facilitation, communication, and organizational skills
Proven ability to operate independently in highly matrixed environments
All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy
Candidates are required to pass a drug test before beginning employment.

Nice To Haves

Enhance and mature the enterprise cybersecurity transformation methodology
Improve acquisition integration speed and execution consistency
Reduce manual effort through standardization and automation
Increase adoption of enterprise cybersecurity controls across acquired entities
Establish measurable, repeatable risk reduction outcomes
Improve executive visibility through standardized reporting and KPIs
Enable successful graduation of acquired entities into sustainable operational models
Building programs rather than simply operating them
Designing repeatable frameworks and playbooks
Solving complex integration and transformation challenges
Working across cybersecurity, engineering, architecture, operations, and leadership teams
Driving continuous improvement and operational excellence
Influencing outcomes without direct management responsibility
Translating strategy into scalable execution

Responsibilities

Design and evolve the cybersecurity integration framework supporting mergers, acquisitions, and divestitures
Develop repeatable methodologies, playbooks, templates, and operational standards supporting acquired entity cybersecurity transformation
Define integration approaches based on acquisition size, complexity, maturity, risk profile, and operating model
Develop cybersecurity operating models supporting centralized, federated, and hybrid environments
Establish scalable processes that improve integration velocity while reducing enterprise risk
Build and maintain the end-to-end cybersecurity transformation lifecycle
Develop and refine assessment methodologies, graduation criteria, maturity frameworks, and readiness models
Analyze lessons learned and continuously improve integration processes, tools, and execution strategies
Identify opportunities to simplify delivery and increase operational efficiency through automation and standardization
Establish measurable success criteria and outcomes that demonstrate risk reduction
Partner with cybersecurity domain teams to integrate acquired entities into enterprise security services including: Identity & Access Management, Endpoint Security, Asset Discovery, Vulnerability Management, Logging & Monitoring, Data Security, Cyber Defense, Cloud Security
Facilitate alignment between acquired entities and enterprise cybersecurity standards
Drive prioritization and sequencing of transformation activities across multiple integration initiatives
Establish and maintain governance processes supporting cybersecurity transformation activities
Facilitate cross-functional working sessions, workshops, and planning activities
Support audit, compliance, and evidence management requirements
Present recommendations, findings, and transformation strategies to cybersecurity and technology leadership
Translate complex technical challenges into actionable business-focused recommendations
Develop executive communications, briefing materials, roadmaps, and transformation updates
Serve as a trusted advisor to program leaders, domain owners, and acquired entity stakeholders