Segment Information Security Officer- Remote or Hybrid in MN or DC

About the role

Join one of the world’s largest health care companies and become part of the first line of defense against security threats. The Enterprise Information Security (EIS) team is responsible for cybersecurity across UnitedHealth Group, supporting the business and members by reducing risk, rapidly responding to threats, focusing on business resiliency, and securing new acquisitions. As Segment Information Security Officer (SISO), you will oversee the segment information risk management program, act as a central point of contact for security process issues, and serve as a change agent for the business in understanding security risks and the role of EIS. You will report to the Business Information Security Officer (BISO) and work as a delegate of EIS.

Responsibilities

• Assist in enterprise and EIS risk management processes and execution
• Partner with segment technology and business leadership to guide segment-level risk management and operational execution
• Partner with segment stakeholders to represent Information Security capabilities to current and prospective customers
• Partner with segment stakeholders to support customer and regulatory audits of the Information Security Program
• Provide leadership, guidance, team direction, problem resolution and accountability for the performance of managers and/or senior level professional staff
• Primary support role, as needed, for the BISO and Office of Information Security
• Communicate (oral and written) to senior management on risk management concepts, specific project risks, and risk mitigation options/scenarios
• Maintain a deep understanding of the business, their customers, and service-delivery models, including strategic initiatives, key systems, and key contacts
• Maintain current knowledge on information security topics and their applicability to UHG and assigned segment
• Responsible for review and advisory oversight of external party contractual security requirements

Requirements

• Bachelor’s degree or 10+ years of information technology experience
• 5+ years of information security experience in a large, highly regulated enterprise
• 2+ years of experience working with external auditors, regulatory bodies, and customers
• 1+ years of experience reviewing security contracts
• Experience with interpretation and application of policy and standards
• Experience with multiple information security frameworks (ISO, NIST, HITRUST, PCI, GLBA and/or FDIC, etc.)
• Proven subject matter expert knowledge of technology risk management and security operations
• Risk management experience to include identification, prioritization, and mitigation of risk
• Proven understanding of business risks and business objectives
• Ability to make quality, data-driven recommendations and decisions following discovery, analysis, and verification

Qualifications

• Technical security certification required (CISSP/CISM)
• Financial technical expertise and general knowledge of the financial industry
• Demonstrated executive presence and excellent communication and client relationship management skills with senior management on issues and key risks to the business (presentations, executive summaries, etc.)

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements)

Pay

The salary for this role will range from $112,700 – $193,200 annually based on full-time employment and is subject to applicable local labor markets, education, work experience, certifications, and other factors.

Schedule

You’ll enjoy the flexibility to work remotely from anywhere within the U.S. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.