Cloud Security & Compliance Lead — SOC 2/HIPAA (Multi-Cloud)

UnitedHealth Group; Davao City; On-site; PHP 1,500,000 - 2,400,000; Full time

Job summary

UnitedHealth Group's Optum division in the Philippines seeks a Public Cloud Compliance Lead to join our security and compliance program. You will collaborate with engineering, product and business teams to align cloud environments with SOC 2, HIPAA, NIST 800-53 and other standards, and provide SME guidance on controls and policies.

You will design, implement and validate security controls across Azure, AWS and GCP, perform audits, and drive automation for ongoing compliance and reporting.

Qualifications

• 5 to 7 years of cloud security and compliance experience.
• Strong understanding of cloud architectures and evidence interpretation.
• Proficiency with Azure, AWS and GCP security tooling.

Responsibilities

• Collaborate across Optum engineering, product and business teams to enhance cloud security.
• Own and maintain Optum Public Cloud security, audit and compliance posture.
• Interpret standards (SOC 2, HIPAA, NIST 800-53) for technical requirements.
• Perform and participate in audit/compliance assessments and attestations.
• Develop and maintain cloud policies aligned to standards and best practices.
• Provide SME support to engineering/product teams; enable automation.
• Develop automated/compliant processes and documentation.

Skills

Cloud security

Regulatory compliance

Multi-cloud (Azure/AWS/GCP)

Automation scripting

Security tooling

Tools

Defender for Cloud

AWS GuardDuty

GCP Command Center

KMS

Tenable

Splunk

Job description

UnitedHealth Group's Optum division in the Philippines seeks a Public Cloud Compliance Lead to join our security and compliance program. You will collaborate with engineering, product and business teams to align cloud environments with SOC 2, HIPAA, NIST 800-53 and other standards, and provide SME guidance on controls and policies.

You will design, implement and validate security controls across Azure, AWS and GCP, perform audits, and drive automation for ongoing compliance and reporting.