Information Security Risk Auditor - Remote

$70,200 - $137,800/Yr

UnitedHealth Group - Eden Prairie, MN

Full-time - Mid Level

Remote - Eden Prairie, MN

Insurance Carriers and Related Activities

About the position

The position involves testing IT security controls over on-prem/cloud technologies in accordance with established security frameworks. The role requires supporting and completing assigned projects, leading walkthroughs, creating test plans, and documenting compliance with professional standards. The individual will also identify control gaps, participate in continuous improvement efforts, and develop technical expertise in Information Risk Governance, particularly in cloud technologies. The role offers flexibility to work remotely and emphasizes career development opportunities.

Responsibilities

• Test IT Security controls over on-prem/cloud technologies in accordance with well-established security frameworks such as HITRUST, NIST, ISO and PCI.
• Support and complete assigned projects in a timely manner including meeting deadlines and expectations, with minimal supervision.
• Attend/Lead walkthroughs, create Test Plans, Test controls and create documentation that complies with professional and departmental standards for content and audit quality.
• Articulate questions to understand process, technologies, controls and gaps in controls and provide clear and concise communication as needed to the appropriate audience.
• Identify ways to mitigate control gaps and opportunities to minimize security risks.
• Participate on assigned continuous improvement efforts in alignment with direction provided by leadership and completes assigned sections within allocated timelines.
• Build on and/or develop the technical expertise needed to assist with Information Risk Governance department operations, methodology, technologies and tools, with an emphasis in cloud.
• Actively seek out trainings with an emphasis on existing and emerging with a special emphasis on cloud technologies.
• Facilitate trainings to share acquired expertise to promote staff development.
• Create and promote standard practices to consistently apply best practices in meeting project objectives.

Requirements

• Bachelor's Degree in information technology or equivalent experience.
• 3+ years of relevant IT experience including some audit experience.
• 2+ years of relevant IT Internal Audit / IT consulting / IT / Security Operations experience.
• General understanding of security and risk concepts and principles and how to apply them.

Nice-to-haves

• Relevant IT certification(s) (e.g. CISSP, CISA, CISM, CIPT, CSFP, ISA, CIA, etc.)
• Experience in health insurance systems.
• Experience working in a complex IT environment.
• PCI, HIPPA, HITRUST, SSAE18, SOX 404 experience.
• Proven solid interpersonal skills while working effectively with a team.
• Proven solid oral and written communication skills.
• Proven desire to make a positive impact with the ability to manage multiple tasks and shift priorities.

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase
• 401k contribution