Information Security Risk Auditor - Remote

$70,200 - $137,800/Yr

UnitedHealth Group - Eden Prairie, MN

Full-time - Mid Level

Remote - Eden Prairie, MN

Insurance Carriers and Related Activities

About the position

UnitedHealth Group is a health care and well-being company dedicated to improving health outcomes globally. The Information Security Risk Auditor position is crucial in leading IT risk assessment and security consulting activities. This role involves assessing the design, effectiveness, and efficiency of IT controls while ensuring compliance with relevant laws and regulations. The auditor will work remotely from anywhere in the U.S., providing flexibility while tackling significant challenges in the field of information security. In this role, the auditor will consistently lead projects with minimal supervision, demonstrating technical proficiency in assigned assessments. Responsibilities include executing scoping and planning activities, performing detailed procedures, and developing final reports. The auditor will anticipate customer needs and proactively develop solutions, providing complex explanations and analyses to stakeholders. Coordination of testing and documentation requests is essential to ensure that IT assessment procedures align with objectives, scope, and risks. The auditor will also assist in preparing and educating business partners and control owners on IT assessment requirements and security protocols. Building solid relationships with key business stakeholders is vital, as is monitoring and implementing new regulatory and IT security guidelines in collaboration with related parties. The role includes reviewing work performed by others, offering recommendations for improvement, and ensuring resources are allocated effectively to meet project deadlines. Participation in special projects undertaken by the department or the company is also expected.

Responsibilities

• Lead IT risk assessment and security consulting activities.
• Execute scoping and planning activities for assessments.
• Perform detailed procedures and develop final reports.
• Anticipate customer needs and develop proactive solutions.
• Provide complex explanations and perform conceptual analysis.
• Coordinate testing and documentation requests for IT assessments.
• Prepare and educate business partners on IT assessment requirements.
• Develop relationships with key business stakeholders.
• Monitor and implement new regulatory and IT security guidelines.
• Review work performed by others and provide recommendations for improvement.
• Participate in special projects undertaken by the department.

Requirements

• Bachelor's Degree in information technology or equivalent experience.
• 2+ years of experience in IT internal audit.
• 2+ years of experience in Information security.

Nice-to-haves

• Relevant IT certification(s) (e.g. CISSP, CISA, CISM, CIPT, CSFP, ISA, CIA, etc.).
• 3+ years of relevant IT experience including some audit experience.
• Experience in health insurance systems.
• Experience working in a complex IT environment.
• Familiarity with NIST, ISO, PCI, HIPAA, HITRUST, SSAE18, SOX 404.
• Proven solid interpersonal skills while working effectively with a team.
• Proven solid oral and written communication skills.
• Ability to manage multiple tasks and shift priorities.

Benefits

• Comprehensive benefits package.
• Incentive and recognition programs.
• Equity stock purchase.
• 401k contribution.