Sr. Manager, Information Security Risk Management

UnitedHealth Group • Arlington, VA

73d • $110,200 - $188,800 • Remote

About The Position

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. The Optum Serve Information Security Team has an exciting Senior Manager Level opportunity leading the Supplier Risk Governance program. The Senior Manager will collaborate with Optum Serve Business Partners as well as other Optum and Enterprise risk teams to ensure program alignment with enterprise policies, standards and associated processes. This role will report directly to the Optum Serve CISO. You'll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Requirements

• 5+ years of supplier management or related experience
• 5+ years of experience in Information Security and Supplier Risk Management including third party contractual oversight and negotiation
• 3+ years managing risk and governance practices
• 2+ years of experience with common security frameworks (NIST 800-53 & 800-171, ISO 27001, CMMC, HITRUST, etc.)
• 2+ years of experience working with ARCHER Enterprise Governance, Risk and Compliance (eGRC) platform
• If you are offered this position, you will be required to provide extensive personal information to obtain and maintain a suitability or determination of eligibility for a Confidential/Secret or Top Secret security clearance as a condition of your employment

Nice To Haves

• Bachelor's degree in Information Technology, Computer Engineering or related field
• 5+ years of experience compiling reports, summaries, and presentations to communicate findings to key stakeholders within the business
• 2+ years of experience with business law, legal contracts and various financial issues
• 2+ years of experience with third-party risk management, due diligence concepts and industry related best practices

Responsibilities

• Lead the ongoing execution of the supplier governance program ensuring the framework continues to address emerging risks
• Oversee supplier due diligence processes and ongoing monitoring to propose mitigation plans to reduce supplier risks
• Partner with key stakeholders to assist with supplier sourcing contracting, pipeline activity and onboarding
• Research and consult with internal experts to understand and document risks identified through risk evaluations and the due diligence processes
• Assist in the negotiation of sourcing contracts to ensure appropriate security language is in place for high-risk suppliers
• Provide overall direction to business partners relative to Supplier Risk and Governance best practice
• Identify and communicate third-party risks to business owners and other stakeholders during the Sourcing process
• Escalate issues or risks internally as appropriate
• Partner with stakeholders, matrix partners, and other subject matter experts to continuously improve our third-party risk processes
• Develop and disseminate consistent, standardized materials for use with Optum Serve associates, business units, and suppliers
• Foster a 'partnering' culture with members of Optum Serve supply chain to ensure value is derived and to drive innovation and productivity
• Recommend changes and improvements as needed to procurement and vendor management teams across enterprise risk team and procurement that may improve third party risk mitigation

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase
• 401k contribution

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree