Sr Risk Assessment/ IT Compliance Analyst- Eden Prairie, MN or Hartford, CT

UnitedHealth Group is a company that's on the rise. We're expanding in multiple directions, across borders and, most of all, in the way we think. Here, innovation isn't about another gadget, it's about transforming the health care industry. Ready to make a difference? Make yourself at home with us and start doing your life's best work.(sm)

The Senior IT Security Consultant will be part of the Risk Assessment and Compliance Monitoring team in Optum Technology Information Risk Management (IRM). The Risk Assessment and Compliance Monitoring team is responsible for assessing and monitoring compliance to our information security policies and procedures across UnitedHealth Group.  As a Senior IT Security Consultant, you will be accountable for executing risk assessments using  HiTRUST,  as well as other frameworks as necessary,  associated with our risk assessment program for UnitedHealth Group.  This position provides information security consultancy to our organization to guide information security best practice across UnitedHealth Group and its family of companies.

Major Responsibilities

Supports our Risk Assessment Program by leading and completing and assessment activities utilizing the HiTRUST framework.
Assesses security gaps in the current operating procedures against policies, standards, and best practices
Analyzes data to identify gaps between security policy, practice, prepare report and validate with stakeholders and  the business entity requesting HiTRUST certification.
Creates and maintains security assessment documentation.
Updates eGRC system with assessment findings and action plans.
Follows up on assessment findings and action plans  to ensure completion by key stakeholders.
Anticipates customer needs around the assessment process and proactively develops solutions to help  them be compliant with the HiTrust framework.
Performs complex conceptual analyses by mapping  between assessment frameworks to ensure complete and consistent security compliance.
Provides explanations and information to stakeholders and  the business entity requesting HiTRUST certification to support a clear understanding of remediation and ensure compliance to the HITRUST framework.
Recommends changes  to the Information Security Office regarding enterprise security policies, control standards, and operational practices.

Qualifications

Bachelor's degree or HS diploma/GED with 3+ Years of applicable experience
3 or more years' experience in an information security role with strong knowledge of information security concepts
3 or more years of experience working on technical assessments
3 or more years of experience working in a customer service focused environment
Knowledge of regulatory requirements and industry standards(ex. HIPAA Security Rule, PCI, SOX)
3 or more year experience with risk assessment and/or risk analysis
3 or more year experience with working with security policies and standards
Ability to travel
Preferred Qualifications:


2 or more years of experience with HiTRUST framework
Managed healthcare or insurance industry experience
Experience working in a matrixes environment
Knowledge of risk frameworks (HITRUST, ISO, COBIT)
CISSP certification
CISA/ CISM certification
Archer eGRC Framework experience
Audit background
Technology Careers with Optum. Information and technology have amazing power to transform the health care industry and improve people's lives. This is where it's happening. This is where you'll help solve the problems that have never been solved. We're freeing information so it can be used safely and securely wherever it's needed. We're creating the very best ideas that can most easily be put into action to help our clients improve the quality of care and lower costs for millions. This is where the best and the brightest work together to make positive change a reality. This is the place to do your life's best work.SM
Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.
UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.