Senior Cloud Security and Compliance Auditor

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, and data they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits, and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.

As a Senior Information Security Risk Auditor within Optum Technology, you will play a critical role in maintaining Optum Public Cloud PCI compliance certification and other compliance standards selected for Optum Cloud platform. You will lead internal and external audits including interpret regulatory/compliance requirements into cloud technology solutions, coordinating appropriate responses and walkthroughs. You will partner with engineering, products and operations teams in managing public cloud compliance and security environment. In this role, you will leverage enterprise-approved AI tools to streamline workflows, automate remediation, evidence collection, and drive continuous improvement; while leveraging AI tools and data insights to influence stakeholders and deliver security by design and strong business outcomes.

You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges.

Primary Responsibilities:

• Maintain Optum Public Cloud PCI compliance certification and compliance with security and policies
• Lead internal and external audit; coordinate and manage across cloud security domains
• Translate technical security requirements into cloud architecture solutions and interpret compliance and security requirements into technical solutions and evidence (e.g., system logs, cloud configurations)
• Drive the successful implementation of automation for remediation, optimization, evidence collection, anomaly detection, and continuous control tuning
• Influence stakeholders by translating AI insights and analytical findings into measurable business outcomes
• Partner with engineering and operations teams to remediate findings, support customer requests, and optimize workflows
• Leverage enterprise-approved AI tools to streamline workflows, automate remediation, and drive continuous operational improvement
• Evaluate emerging trends to influence solution design and strategic innovation in cloud security and compliance
• Proven experience in translating state, customer, regulatory, operational, or market insight into product strategy, solution strategy, roadmap decisions, solution priorities, operational improvements, or measurable business outcomes
• Proven executive communication, stakeholder management, strategic planning, and decision-framing skills

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear directions on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• 5+ years of hands-on experience with PCI DSS implementation, monitoring, and validation
• 3+ years of cloud security and compliance experience across frameworks such as PCI DSS, SOC 2, HIPAA, HITRUST, or NIST 800-53
• 3+ years of experience managing and coordinating internal and external audits
• 2+ years of working with cloud architecture and the ability to interpret compliance and technical requirements into cloud technology solutions

Preferred Qualifications:

• Bachelor's degree OR 4+ years of equivalent experience in Information Security, Computer Science, or a related technical field
• 2+ years of healthcare technical operations experience (supporting engineering teams, handling customer request tickets, and driving operational automation)
• Industry security certifications such as CISA, CISSP, CCSP, or cloud vendor security specialty credentials (AWS, Azure, GCP)
• Deep expertise in defining and maintaining public cloud PCI DSS scope boundaries in enterprise environments
• All Telecommuters will be required to adhere to UnitedHealth Group's Telecommuter Policy.

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $91,700 - $163,700 annually based on full-time employment. We comply with all minimum wage laws as applicable.

Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location, and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups, and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.

UnitedHealth Group is a drug-free workplace. Candidates are required to pass a drug test before beginning employment.

#RPO #GREEN