The Enterprise Security Office (ESO) Trust Office initiative is dedicated to enhancing market trust, driving enterprise transparency for clients and stakeholders, and serving as a trusted security partner across the healthcare ecosystem. You will serve as a senior technical authority driving customer-related security engagement strategies and working directly with executive leadership to integrate security strategies into key customer interactions.
This role focuses on driving the enterprise's centralized security strategy while translating complex, technical security architectures to external audiences, regulatory bodies, and strategic business partners. Key strategic pillars include Sales Enablement (mitigating risk and preventing lost commercial opportunities due to compliance requirements), Customer Confidence (providing transparent, frictionless security evaluations), and Regulatory Alignment (centralizing global compliance frameworks and automating audit workflows).
*This position is scheduled as on-site four days in-office per week.
Primary Responsibilities:- Formulate and execute the enterprise security trust vision and multi-year strategy, aligning technical security posture with business growth targets and regulatory standards
- Partner with executive leadership across the enterprise to establish and govern a scalable Trust Office framework that effectively addresses client security inquiries and risk assessments
- Drive strategic sales enablement by partnering with executive client account teams on complex security commitments during major RFP, contracting, and vendor evaluation processes
- Represent the Trust Office as a strategic technical authority during critical incident response engagements and executive client meetings
- Establish and maintain strategic relationships with enterprise customers, auditors, and key industry partners to articulate the organization's security posture and compliance maturity
- Evaluate emerging global cybersecurity threats, industry shifts, and regulatory mandates, recommending proactive enterprise-wide measures to reinforce resilience and trust
- Direct technical strategy and oversight for high-priority client security responses, assessments, audits, RFPs, and contractual security reviews
- Serve as the ultimate technical escalation point for enterprise Trust Office issues and high-stakes client security inquiries
- Prepare and deliver strategic security trust briefings, metrics, and risk reports to executive leadership and board-level committees
- Oversee the integrity and accuracy of client-facing security documentation, audit collateral, and internal/external trust portals
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.
Required Qualifications:- 12+ years of progressive technical experience in information security, risk management, or cybersecurity compliance
- 7+ years of experience collaborating with cross-functional executive teams and driving enterprise-level security programs
- 5+ years of experience leading high-stakes technical customer security reviews, enterprise risk assessments, and executive-level RFP negotiations
- 5+ years of experience designing, building, or scaling an enterprise Security Trust Office, Trust Center, or customer security framework
- Demonstrated experience communicating complex cybersecurity concepts and risk metrics directly to executive leadership, board members, and external client leadership
- In-depth mastery of enterprise security frameworks (e.g., NIST CSF, ISO 27001), data privacy laws (e.g., GDPR, CCPA, HIPAA), and global compliance standards
Preferred Qualifications- Master's degree in Information Security, Computer Science, Business Administration, or a related technical field
- Active industry certifications such as CISSP, CISM, CISA, or CRISC
- Proven experience implementing enterprise automated trust platforms, NDA automation tools, and security questionnaire systems
- Deep domain expertise in healthcare cybersecurity regulations (e.g., HITRUST, HIPAA Security Rule, FedRAMP)
*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $134,600 - $230,800 annually based on full-time employment. We comply with all minimum wage laws as applicable.
