Vendor Management and Risk Analyst - Remote

About the role

Pinnacle Method Consulting's mission is to help job seekers reach their career peak by accessing top-tier opportunities. We are not a staffing firm or agency. Pinnacle Method does not hire for these roles—we systematically source and verify them from premier employers. Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Optum Bank is seeking a Vendor Management Analyst to join a highly visible and dynamic team. As a Vendor Management Analyst, you will play a pivotal role in overseeing vendor relationships, driving efficiency, and ensuring operational excellence across various vendor services.

Key areas of focus

• Regulatory Compliance: Develop and implement strategies to ensure vendors adhere to all regulatory requirements and industry best practices
• Risk Management: Safeguard operational integrity by continuously monitoring vendor compliance and mitigating potential risks
• Stakeholder Collaboration: Work closely with internal and external stakeholders, including compliance and legal teams, vendors, and other departments
• Innovation and Customer Focus: Foster a forward-thinking approach to regulatory governance, focusing on continuous improvement and cost-effectiveness

Responsibilities

• Review third-party certifications (e.g. SOC 2, ISO 27001, HITRUST) to identify potential gaps or risks
• Track regulatory developments and ensure vendors remain compliant with applicable laws and guidelines (e.g., FDIC, CFPB, etc)
• Validate vendor performance and service level agreements (SLAs)
• Prepare regular reports on vendor risk status for senior leadership, risk committees, and auditors
• Collaborate with internal stakeholders to assess vendor alignment with organizational policies and risk tolerance
• Monitor overall vendor program performance against SLAs, KPIs, and risk mitigation plans
• Partner with Procurement, Legal, IT, and other departments to ensure a holistic approach to third-party risk management
• Provide training to internal stakeholders on TPRM policies, tools, and best practices
• Maintain a centralized repository of third-party documentation, including risk assessments, contracts, SLAs, and third party
• Work with vendors and internal teams to remediate identified issues or risks
• Assist in developing and maintaining third-party governance frameworks, policies, and procedures

Required qualifications

• 3+ years of vendor management experience within a financial organization
• 2+ years of experience with internal and external audit compliance support (FDIC, FDICIA, GLBA, SOC)
• 2+ years of GRC (Governance, Risk & Compliance) experience
• 2+ years of experience with regulatory guidelines pertaining to security of sensitive data; PII, PCI, PHI, etc.
• 2+ years of experience with HIPPA, PCI, HITRUST, SOX

Preferred qualifications

• Advanced degree or certifications (e.g., CRVPM, CTPRP, CISSP, or CISA)
• Experience with creating presentations for executive audience with the ability to translate and communicate complex Business, IT and operational challenges into perspectives that are understandable, impactful and actionable for leaders
• Financial Services industry experience

Work location

You'll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Additional information

All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc.