Segment Information Security Officer

UnitedHealth Group is a health care and well-being company that's dedicated to improving the health outcomes of millions around the world. We are comprised of two distinct and complementary businesses, UnitedHealthcare and Optum, working to build a better health system for all. Here, your contributions matter as they will help transform health care for years to come. Make an impact with a diverse team that shares your passion for helping others. Join us to start Caring. Connecting. Growing together.

The Segment Information Security Officer (SISO) for Home & Community supporting LHC Group will work with technology teams to execute and sustain the security program and strategy. Candidate must be an innovative thinker and has a solid background in cyber security. Leveraging existing locally managed solutions and Optum solutions where applicable, this individual will lead the collective efforts including, but not limited to:

• Vulnerability & exposure management
• Information security monitoring, analysis, and response
• Investigations and data forensics
• Penetration testing
• Security metrics and reporting
• Effective leadership and solutioning skills
• Competency with industry frameworks and regulations including NIST, HIPAA, ISO, etc.
• Audit and assessment
• Identity and Access Management
• Contract reviews
• Security reviews of application, data and infrastructure designs, including cloud and locally hosted solutions
• Security review of network solutions, including firewalls, Regional Network Hub technology, data flows, voice, and video

You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges.

Primary Responsibilities:

• Ensure compliance with industry, regulatory and contractual security requirements of all products, customers, and jurisdiction
• Provides analysis of and suggested solutions to complex Cyber Security issues, as well as complex conceptual analysis, building and maintaining of key security and contract metrics
• Lead programs that will minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled, and processed within the organization
• Collaborates with leadership to initiate, facilitate, and promote activities to foster information security awareness within the organization
• Lead a multi-organizational security team to foster growth and continued maturation of various security programs in the organization
• Provides expertise/analysis for the management/implementation of budgets, forecasts, and resource planning strategies in support of the client engagement
• Provides direction and collaboration with other senior leadership, directors, managers, and stakeholders in the mitigation of risks within the IT Security infrastructure, Business Unit Solution as well the overall organization
• Creates a culture of physical and information security within the organization and driving behavioral changes for the business. Oversees, develops and/or delivers initial and ongoing security training to the workforce. Initiates, facilitates, and promotes activities to foster information security awareness within the organization and related entities
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to evaluate the risk in the context of the organization and to mitigate risk
• Ensure that the risk management and access control needs of the organization are addressed
• Travel up to 10% of the time

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• Bachelor's degree in Computer Science, Business, related field or equivalent experience
• 7+ years of experience in Information Security
• 3+ years of expertise in cloud security, platforms, and services, including understanding of current security offerings from leading cloud services providers, and their applicability to securing a SaaS for enterprise security requirements
• 3+ years of experience identifying business needs and priorities into applicable IT solutions and/or strategies

Preferred Qualifications:

• Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP)
• Demonstrated solid management presence with ability to influence local and remote personnel at varying levels (including executive)
• Ability to be a solid communicator with demonstrated collaboration, analytical, and problem-solving skills to achieve business goals, while balancing security and technology objectives
• Demonstrated highest ethical standards and sense of propriety combined with a solid service orientation and mindset is a must
• Ability to partner with physicians and clinicians related to security and risk management within a clinical setting
• Healthcare industry experience

*All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.

California, Colorado, Connecticut, Hawaii, Nevada, New Jersey, New York, Rhode Island, Washington, Washington, D.C. Residents Only: The salary range for this role is $104,700 to $190,400 annually. Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. UnitedHealth Group complies with all minimum wage laws as applicable. In addition to your salary, UnitedHealth Group offers benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with UnitedHealth Group, you'll find a far-reaching choice of benefits and incentives.

Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

Diversity creates a healthier atmosphere: UnitedHealth Group is an Equal Employment Opportunity/Affirmative Action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.

UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.