Optum Digital SISO- Telecommute

The Senior Security Engineer / Segment Information Security Officer (SISO) supports the day-to-day operation of the information security management system and risk management program and supports Enterprise Information Security (EIS) processes and programs.  The SISO is a process expert and they act as a central point of contact for security process issues and questions.  The SISO is deemed a critical integration point with the business and is considered a change agent for the business in understanding security risks and the role and responsibilities of EIS, as well as ensuring that EIS fully understands and is engaged to support the needs, objectives and priorities of the business. 

The SISO provides operational support and reports to the Business Information Security Officer (BISO) and works as a delegate of EIS.   

Major Responsibilities 

• Work with Optum business lines across Optum Digital and Optum Labs to integrate them into risk prioritized cyber security processes and controls. 
• Partner with product and engineering leads to drive security strategies into product lines, influencing security within the delivery and engineering processes, performing security design and code reviews and providing security engineering support through the development of architecture, engineering and code patterns. 
• Serve as a regional point of contact for EIS policy and process issues and escalations 
• Contribute as a team member in major programs or change initiatives aimed at increasing the enterprise security capabilities 
• Communicate to senior management on risk management concepts, as well as specific project risks and risk mitigation options/scenarios 
• Maintain a deep understanding of the business, our patients and healthcare-delivery models.  
• This understanding includes key systems, key contacts, priorities and concerns within the business and IT. 
• Maintain current knowledge on information security topics and their applicability to the enterprise and the healthcare industry. 
• Drive direct engagement with product teams to ensure healthcare applications are secure.   
• Competencies  
• Relates well to constraints experienced by business partners and finds practical, win-win solutions 
• Analyzes customer needs; ensures solutions meet business and security requirements 
• Holds self and others accountable for meeting customer needs and expectations in a timely, professional manner 
• Maintains high personal accountability; takes ownership of issues, develops effective remediation approaches, and drives for results 
• Employs business acumen to develop appropriate solutions and solve problems - understands business risks and business objectives 
• Understands health care delivery and provider environments 
• Able to translate business needs into information security requirements 
• Ability to communicate technical security risks in a manner that resonates with business leaders  
• Able to establish and manage to a planned set of related activities with a focus on hitting deadlines 

To be considered for this position, applicants need to meet the qualifications listed in this posting.  

Qualifications:  

• Experience working in large and highly-regulated organizations 
• Technical security certification like SSCP, CISSP, CCSP, CEH, etc. 
• Experience with practical interpretation and application of policy and standards 
• Demonstrable experience with ISO 27001 implementation and operations  
• Cloud security knowledge including AWS, Azure. and GCP; Inspector, Guard Duty, and Security center practical knowledge. 
• Ability to prioritize and understand risk in GRC and compliance tools and communicate effectively with senior leaders and engineers alike. 

Preferred 

• Experience with Public Cloud platforms (Azure, AWS, GCP) 
• Subject matter expert knowledge of the technology aspects of security 
• Experience with GDPR, HIPAA & PCI frameworks  
• Bachelor's degree in an IT related discipline or equivalent experience 

Technology Careers with Optum. Information and technology have amazing power to transform the health care industry and improve people's lives. This is where it's happening. This is where you'll help solve the problems that have never been solved. We're freeing information so it can be used safely and securely wherever it's needed. We're creating the very best ideas that can most easily be put into action to help our clients improve the quality of care and lower costs for millions. This is where the best and the brightest work together to make positive change a reality. This is the place to do your life's best work.SM

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

*All Telecommuters will be required to adhere to UnitedHealth Group’s Telecommuter Policy.

Colorado, Connecticut or Nevada Residents Only:  The salary range for Colorado residents is $94,500 to $171,700. Pay is based on several factors including but not limited to education, work experience, certifications, etc. As of the date of this posting, In addition to your salary,  UHG offers the following benefits for this position, subject to applicable eligibility requirements: Health, dental, and vision plans; wellness program; flexible spending accounts; paid parking or public transportation costs; 401(k) retirement plan; employee stock purchase plan; life insurance, short-term disability insurance, and long-term disability insurance; business travel accident insurance; Employee Assistance Program; PTO; and employee-paid critical illness and accident insurance.

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.

#EISecurity