Senior Cloud Security and Compliance Auditor

UnitedHealth Group•Eden Prairie, MN

3d•$91,700 - $163,700•Remote

About The Position

As a Senior Information Security Risk Auditor within Optum Technology, you will help maintain Optum Public Cloud PCI compliance certification and other compliance standards selected for the Optum Cloud platform. You will lead internal and external audits, interpret regulatory and compliance requirements for cloud technology solutions, and coordinate audit responses and walkthroughs. You will partner with engineering, product, and operations teams to manage the public cloud compliance and security environment. The role uses enterprise-approved AI tools and data insights to streamline workflows, automate remediation and evidence collection, and support continuous improvement. You will translate security findings and insights into business outcomes, support security-by-design practices, and evaluate emerging trends to influence cloud security and compliance strategy. The position may be performed by telecommuting from anywhere within the U.S., subject to UnitedHealth Group’s Telecommuter Policy.

Requirements

At least 5 years of hands-on experience with PCI DSS implementation, monitoring, and validation.
At least 3 years of cloud security and compliance experience across frameworks such as PCI DSS, SOC 2, HIPAA, HITRUST, or NIST 800-53.
At least 3 years of experience managing and coordinating internal and external audits.
At least 2 years of experience working with cloud architecture and interpreting compliance and technical requirements into cloud technology solutions.
Proven experience translating state, customer, regulatory, operational, or market insight into strategy, roadmap decisions, priorities, operational improvements, or measurable business outcomes.
Proven executive communication, stakeholder management, strategic planning, and decision-framing skills.
Adherence to UnitedHealth Group’s Telecommuter Policy for telecommuters.
Pass a drug test before beginning employment.

Nice To Haves

Bachelor’s degree in Information Security, Computer Science, or a related technical field, or at least 4 years of equivalent experience.
At least 2 years of healthcare technical operations experience, including supporting engineering teams, handling customer request tickets, and driving operational automation.
Industry security certifications such as CISA, CISSP, CCSP, or cloud vendor security specialty credentials (AWS, Azure, GCP).
Deep expertise in defining and maintaining public cloud PCI DSS scope boundaries in enterprise environments.

Responsibilities

Maintain Optum Public Cloud PCI compliance certification and compliance with security policies.
Lead internal and external audits and coordinate activities across cloud security domains.
Translate technical security requirements into cloud architecture solutions and convert compliance and security requirements into technical solutions and evidence, such as system logs and cloud configurations.
Drive implementation of automation for remediation, optimization, evidence collection, anomaly detection, and continuous control tuning.
Translate AI insights and analytical findings into measurable business outcomes and influence stakeholders.
Partner with engineering and operations teams to remediate findings, support customer requests, and optimize workflows.
Use enterprise-approved AI tools to streamline workflows, automate remediation, and drive continuous operational improvement.
Evaluate emerging trends to influence cloud security and compliance solution design and strategic innovation.
Translate state, customer, regulatory, operational, or market insights into product or solution strategy, roadmap decisions, priorities, operational improvements, or measurable business outcomes.
Apply executive communication, stakeholder management, strategic planning, and decision-framing skills.