Job Information
UnitedHealth Group Senior Information Security Engineering Consultant - GRC in Noida, India
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by diversity and inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health equity on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
Ensure compliance to the business agreement, policies, procedures, & regulations along with ability to map controls and compliance requirements
Monitors information security risks and drives remediation of policy exceptions
Establishes compliance with data privacy regulation
Identify process and security gaps, recommend improvements, and assist to implement corrective action
Identify required process improvements to proactively address risks/vulnerabilities/threats
Perform and manage Control/Risk Assessment and remediation of identified findings as per process documents
Establish a baseline of vendor risk, identify areas of potential exposure, develop and align vendor risk management strategies with Client’s goals and objectives, and execute program ensuring consistency
Support the design and implementation of a common and consistent vendor risk management (VRM) program to effectively manage vendor risk in accordance with internal policy and Federal/State Regulatory requirements
Maintain current knowledge on quality management and information security topics and their applicability program requirements
Serves as POC (Point of Contact) in lead’s absence
Create executive summaries with recommendations & direction regarding remediation efforts and disposition of the third party
Communicate professionally with stakeholders/end users through multiple communication
Define risk thresholds, develop, and implement a risk framework, remediate identified gaps, governing the process
Manage the process of granting and expiring exceptions to policies and control standards through the GRC platform
Establish real-time actionable dashboards for Policies and Standard and Risk Management
Monthly review of High and Critical risks with risk owners and executive leadership
Establish an Executive dashboard to provide visibility into the goals and KPI’s
Perform control testing to evaluate the maturity and effectiveness of implemented security controls based on HITRUST/ NIST 800-53 revision 2 Framework
Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
Required Qualifications:
Bachelor's degree or higher level of education
5+ years of technical experience in Information Security
GRC platform implementation experience (such as Service Now, LogicGate, Rsam)
Experience with federal cyber security standards (such as NIST 800-53)
Good understanding of ISO27001 and Security Core Concepts
Good understanding of Risk Register, risk acceptance and risk exceptions
Auditing skills and the ability to manage risk assessments / projects independently
Proven excellent communication skills both verbal and written
Proven good presentation skills particularly ability to present technology elements in manner personnel can follow and act
Preferred Qualifications:
Professional accreditation in IT audit, security, privacy or other related technology disciplines (CISA, CISSP, CompTIA Security+: etc.)
Experience with ISO31000 (risk management), ISO 22301 (BCMS), ISO20K (ITSM)
Knowledge of Cloud computing and understanding of how to assess Cloud related risks
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone–of every race, gender, sexuality, age, location and income–deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
UnitedHealth Group
-
- UnitedHealth Group Jobs