Segment Information Security Officer- Remote or Hybrid in MN or DC

UnitedHealth Group•Eden Prairie, MN

1d•$112,700 - $193,200•Hybrid

About The Position

Explore opportunities with the Enterprise Information Security (EIS) team at UnitedHealth Group. Join one of the world's largest health care companies and become part of the first line of defense against security threats. We are focused on strengthening our cyber defenses, ransomware resiliency, vulnerability mitigation, and securing all aspects of our systems and data globally. We are passionate about protecting the sensitive data of our members and providers. We are committed to leveraging every tool, partnership and process needed to enhance our security posture. It is our duty to protect the information of those we serve while Caring. Connecting. Growing together. The Enterprise Information Security (EIS) team is responsible for cybersecurity across our organization. We support our business and members by reducing risk, rapidly responding to threats, focusing on business resiliency and securing new acquisitions. The Segment Information Security Officer (SISO) is responsible for overseeing the segment information risk management program and supports Enterprise Information Security (EIS) processes and programs. The SISO is an EIS process expert and acts as a central point of contact for security process issues and questions. The SISO is deemed a critical integration point with business leadership teams and is considered a change agent for the business in understanding security risks and the role and responsibilities of EIS, as well as ensuring that EIS fully understands and is engaged to support the needs and objectives of the business. The SISO provides management and strategic support, reports to the Business Information Security Officer (BISO) and works as a delegate of EIS

Requirements

Bachelor’s degree or 10+ years of information technology experience
5+ years of information security experience in a large, highly regulated enterprise
2+ years of experience working with external auditors, regulatory bodies, and customers
1+ years of experience reviewing security contracts
Experience with interpretation and application of policy and standards
Experience with multiple information security frameworks (ISO, NIST, HITRUST, PCI, GLBA and/or FDIC etc.)
Proven subject matter expert knowledge of technology risk management and security operations
Risk management experience to include identification, prioritization, and mitigation of risk
Proven understanding of business risks and business objectives
Ability to make quality, data-driven recommendations and decisions following discovery, analysis, verification, etc.

Nice To Haves

Technical security certification required (CISSP/CISM)
Financial technical expertise and general knowledge of the financial industry
Demonstrated executive presence and has excellent communication and client relationship management skills with senior management on issues and key risks to the business (presentations, executive summaries, etc.)

Responsibilities

Assist in enterprise and EIS risk management processes and execution
Partner with segment technology and business leadership to guide segment-level risk management and operational execution
Partner with segment stakeholders to represent the Information Security capabilities of UHG to both current and prospective customers
Partner with segment stakeholders to support customer and regulatory audits of the Information Security Program
Responsible for review and advisory oversight of external party contractual security requirements
Provide leadership, guidance, team direction, problem resolution and accountability for the performance of managers and/or senior level professional staff
Primary support role, as needed, for the BISO and Office of Information Security
Significant level of communications (oral and written) to senior management on risk management concepts, as well as specific project risks and risk mitigation options/scenarios
Maintains a deep understanding of the business, their customers, and service-delivery models. This understanding includes strategic business initiatives and goals, key systems and key contacts within the business and IT
Maintains current knowledge on information security topics and their applicability to UHG and assigned segment