Info Security Risk Analyst (Security/Auditing Assessment)

Optum, a UnitedHealth Group Company; Metro Manila; On-site; PHP 600,000 - 950,000; Full time

Job summary

Optum, a UnitedHealth Group Company, is seeking a detail-oriented professional to lead third-party risk assessments and remediation efforts. You will engage with strategic third-party relationships, communicating across multiple channels to build trust and ensure compliance with GCC requirements.

The role involves documenting procedures, reporting regularly, and guiding remediation initiatives to address identified findings within the defined governance framework.

Qualifications

• Undergraduate degree or equivalent experience.

Responsibilities

• Lead third-party assessments and follow-up activities with strategic third-party relationships.
• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships.
• Understand and enforce General Computing Controls of third-party organization structure.
• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action.
• Develop and maintain procedure documentation.
• Execution of reporting (Daily/Weekly/Monthly).

Skills

Microsoft 365 (Excel, Word, PowerPoint

Education

Undergraduate degree or equivalent experience

Job description

Primary Responsibilities

• Lead third-party assessments and follow-up activities with strategic third-party relationships

• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships

• Understand and enforce General Computing Controls of third-party organization structure

• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action

• Develop and maintain procedure documentation

• Execution of reporting (Daily/Weekly/Monthly)
  

Top responsibilities for this position:

• Understand and scope properly third-party organization structure to apply necessary controls to be assessed

• Perform and manage control/risk assessment and remediation of identified findings as per process documents

• Ensure third-party compliance to the business agreement, policies, procedures, & regulations along with ability to map controls and compliance requirements

• Review third-party supplied policies & procedures, internal/external assessment reports, agreements and provide feedback

• Executive summaries with recommendations & direction regarding remediation efforts and disposition of the third party

• Communicate, elevate, and track third-party remediation progress on assessment remediation activities

• Understand information security risks that are inherent to a business and articulate those risks in business terms

• Maintain current knowledge on information security topics and their applicability program requirements

• Engage onshore leadership regarding any escalation/delays/deviations during assessment/remediation

• Software tools/skills needed:

• Advance level experience in Microsoft 365 (Excel, Word, PowerPoint, etc.)

Job Qualifications

• Undergraduate degree or equivalent experience.