The Segment Information Security Officer (SISO) is responsible for overseeing the segment information risk management program and supports Enterprise Information Security (EIS) processes and programs. The SISO is an EIS process expert and acts as a central point of contact for security process issues and questions. The SISO is deemed a critical integration point with business leadership teams and is considered a change agent for the business in understanding security risks and the role and responsibilities of EIS, as well as ensuring that EIS fully understands and is engaged to support the needs and objectives of the business.
The SISO provides management and strategic support, reports to the Business Information Security Officer (BISO) and works as a delegate of EIS
You'll enjoy the flexibility to work remotely* from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.
Primary Responsibilities: - Assist in enterprise and EIS risk management processes and execution
- Partner with segment technology and business leadership to guide segment-level risk management and operational execution
- Partner with segment stakeholders to represent the Information Security capabilities of UHG to both current and prospective customers
- Partner with segment stakeholders to support customer and regulatory audits of the Information Security Program
- Responsible for review and advisory oversight of external party contractual security requirements
- Provide leadership, guidance, team direction, problem resolution and accountability for the performance of managers and/or senior level professional staff
- Primary support role, as needed, for the BISO and Office of Information Security
- Significant level of communications (oral and written) to senior management on risk management concepts, as well as specific project risks and risk mitigation options/scenarios
- Maintains a deep understanding of the business, their customers, and service-delivery models. This understanding includes strategic business initiatives and goals, key systems and key contacts within the business and IT
- Maintains current knowledge on information security topics and their applicability to UHG and assigned segment
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.
Required Qualifications: - Bachelor's degree or 10+ years of information technology experience
- 5+ years of information security experience in a large, highly regulated enterprise
- 2+ years of experience working with external auditors, regulatory bodies, and customers
- 1+ years of experience reviewing security contracts
- Experience with interpretation and application of policy and standards
- Experience with multiple information security frameworks (ISO, NIST, HITRUST, PCI, GLBA and/or FDIC etc.)
- Proven subject matter expert knowledge of technology risk management and security operations
- Risk management experience to include identification, prioritization, and mitigation of risk
- Proven understanding of business risks and business objectives
- Ability to make quality, data-driven recommendations and decisions following discovery, analysis, verification, etc.
Preferred Qualifications: - Technical security certification required (CISSP/CISM)
- Financial technical expertise and general knowledge of the financial industry
- Demonstrated executive presence and has excellent communication and client relationship management skills with senior management on issues and key risks to the business (presentations, executive summaries, etc.)
*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 - $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.
