[Hiring] Senior Cloud Security and Compliance Auditor @UnitedHealth Group

Role Description

As a Senior Information Security Risk Auditor within Optum Technology, you will play a critical role in maintaining Optum Public Cloud PCI compliance certification and other compliance standards selected for Optum Cloud platform. You will lead internal and external audits including interpret regulatory/compliance requirements into cloud technology solutions, coordinating appropriate responses and walkthroughs. You will partner with engineering, products and operations teams in managing public cloud compliance and security environment. In this role, you will leverage enterprise-approved AI tools to streamline workflows, automate remediation, evidence collection, and drive continuous improvement; while leveraging AI tools and data insights to influence stakeholders and deliver security by design and strong business outcomes.

You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges.

• Maintain Optum Public Cloud PCI compliance certification and compliance with security and policies
• Lead internal and external audit; coordinate and manage across cloud security domains
• Translate technical security requirements into cloud architecture solutions and interpret compliance and security requirements into technical solutions and evidence (e.g., system logs, cloud configurations)
• Drive the successful implementation of automation for remediation, optimization, evidence collection, anomaly detection, and continuous control tuning
• Influence stakeholders by translating AI insights and analytical findings into measurable business outcomes
• Partner with engineering and operations teams to remediate findings, support customer requests, and optimize workflows
• Leverage enterprise-approved AI tools to streamline workflows, automate remediation, and drive continuous operational improvement
• Evaluate emerging trends to influence solution design and strategic innovation in cloud security and compliance
• Proven experience in translating state, customer, regulatory, operational, or market insight into product strategy, solution strategy, roadmap decisions, solution priorities, operational improvements, or measurable business outcomes
• Proven executive communication, stakeholder management, strategic planning, and decision-framing skills

Qualifications

• 5+ years of hands-on experience with PCI DSS implementation, monitoring, and validation
• 3+ years of cloud security and compliance experience across frameworks such as PCI DSS, SOC 2, HIPAA, HITRUST, or NIST 800-53
• 3+ years of experience managing and coordinating internal and external audits
• 2+ years of working with cloud architecture and the ability to interpret compliance and technical requirements into cloud technology solutions

Preferred Qualifications

• Bachelor's degree OR 4+ years of equivalent experience in Information Security, Computer Science, or a related technical field
• 2+ years of healthcare technical operations experience (supporting engineering teams, handling customer request tickets, and driving operational automation)
• Industry security certifications such as CISA, CISSP, CCSP, or cloud vendor security specialty credentials (AWS, Azure, GCP)
• Deep expertise in defining and maintaining public cloud PCI DSS scope boundaries in enterprise environments

Requirements

*All Telecommuters will be required to adhere to UnitedHealth Group’s Telecommuter Policy.

Benefits

• Comprehensive benefits package
• Incentive and recognition programs
• Equity stock purchase
• 401k contribution (all benefits are subject to eligibility requirements)

Salary Information

The salary for this role will range from $91,700 - $163,700 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Application Deadline

This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

Company Description

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location, and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups, and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes — an enterprise priority reflected in our mission.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.