Vendor Management Analyst

UnitedHealth Group•Eden Prairie, MN

3d•Remote

About The Position

Optum Bank is seeking a Vendor Management Analyst to join a highly visible and dynamic team. As a Vendor Management Analyst, you will play a pivotal role in overseeing vendor relationships, driving efficiency, and ensuring operational excellence across various vendor services. Your key areas of focus will be: Regulatory Compliance: Develop and implement strategies to ensure vendors adhere to all regulatory requirements and industry best practices. Risk Management: Safeguard operational integrity by continuously monitoring vendor compliance and mitigating potential risks. Stakeholder Collaboration: Work closely with internal and external stakeholders, including compliance and legal teams, vendors, and other departments. Innovation and Customer Focus: Foster a forward-thinking approach to regulatory governance, focusing on continuous improvement and cost-effectiveness. In addition, this role will involve operational oversight and ongoing development, strengthening regulatory governance initiatives, and being accountable for implementing strategies to enhance vendor compliance. To succeed in this role, you need to work well with all bank leaders and operational functions, inside and outside Optum Bank. The ideal candidate is strategic, collaborative, determined, and detail-oriented. This role focuses on risk interpretation and stakeholder communication; it does not involve hands on testing, coding, or technical control execution. You’ll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Requirements

3+ years of vendor management experience within a financial organization
2+ years of experience with internal and external audit compliance support (FDIC, FDICIA, GLBA, SOC)
2+ years of GRC (Governance, Risk & Compliance) experience
2+ years of experience with regulatory guidelines pertaining to security of sensitive data; PII, PCI, PHI, etc.
2+ years of experience with HIPPA, PCI, HITRUST, SOX

Nice To Haves

Experience with creating presentations for executive audience with the ability to translate and communicate complex Business, IT and operational challenges into perspectives that are understandable, impactful and actionable for leaders
Financial Services industry experience
Located in MN

Responsibilities

Review and interpret third party contracts, service level agreements (SLAs), and assurance documentation (e.g., SOC 2, ISO 27001, HITRUST) to identify vendor risk considerations and compliance gaps from a business and regulatory perspective
Collaborate with internal stakeholders to assess vendor alignment with organizational policies and risk tolerance
Assist in developing and maintaining third-party governance frameworks, policies, and procedures
Prepare regular reports on vendor risk status for senior leadership, risk committees, and auditors
Monitor overall vendor program performance against SLAs, KPIs, and risk mitigation plans
Partner with Procurement, Legal, IT, and other departments to ensure a holistic approach to third-party risk management
Provide training to internal stakeholders on TPRM policies, tools, and best practices
Track regulatory developments and ensure vendors remain compliant with applicable laws and guidelines (e.g., FDIC, CFPB, etc)
Maintain a centralized repository of third-party documentation, including risk assessments, contracts, SLAs, and third party
Work with vendors and internal teams to remediate identified issues or risks