Information Security Risk Auditor

$70,200 - $137,800/Yr

UnitedHealth Group - Eden Prairie, MN

Full-time - Entry Level

Remote - Eden Prairie, MN

Insurance Carriers and Related Activities

About the position

The Information Security Risk Auditor role at Optum involves testing IT security controls over on-prem/cloud technologies in accordance with established security frameworks. The position requires supporting and completing projects, leading walkthroughs, and creating documentation that meets professional standards. The auditor will identify control gaps, participate in continuous improvement efforts, and develop technical expertise in Information Risk Governance, particularly in cloud technologies. This remote position offers flexibility and opportunities for professional development.

Responsibilities

• Test IT Security controls over on-prem/cloud technologies in accordance with well-established security frameworks such as HITRUST, NIST, ISO and PCI
• Support and complete assigned projects in a timely manner including meeting deadlines and expectations, with minimal supervision
• Attend/Lead walkthroughs, create Test Plans, Test controls and create documentation that complies with professional and departmental standards for content and audit quality
• Articulate questions to understand process, technologies, controls and gaps in controls and provide clear and concise communication as needed to the appropriate audience
• Identify ways to mitigate control gaps and opportunities to minimize security risks
• Participate on assigned continuous improvement efforts in alignment with direction provided by leadership and completes assigned sections within allocated timelines
• Builds on and/or develops the technical expertise needed to assist with Information Risk Governance department operations, methodology, technologies and tools, with an emphasis in cloud
• Actively seek out trainings with an emphasis on existing and emerging with a special emphasis on cloud technologies
• Facilitate trainings to share acquired expertise to promote staff development
• Create and promote standard practices to consistently apply best practices in meeting project objectives

Requirements

• Bachelor's Degree in information technology or equivalent experience
• 3+ years of relevant IT experience including some audit experience
• 2+ years of relevant IT Internal Audit / IT consulting / IT / Security Operations experience
• General understanding of security and risk concepts and principles and how to apply them

Nice-to-haves

• Relevant IT certification(s) (e.g. CISSP, CISA, CISM, CIPT, CSFP, ISA, CIA, etc.)
• Experience in health insurance systems
• Experience working in a complex IT environment
• PCI, HIPPA, HITRUST, SSAE18, SOX 404 experience
• Proven solid interpersonal skills while working effectively with a team
• Proven solid oral and written communication skills
• Proven desire to make a positive impact with the ability to manage multiple tasks and shift priorities

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase
• 401k contribution