Senior Information Security Risk Analyst

Optum Philippines; Philippines; On-site; PHP 700,000 - 900,000; Full time

Job summary

Optum Global Solutions (Philippines) Inc. is seeking professionals for a Risk Records and internal audit-focused role. The position involves coordinating with segment leads, security teams, and compliance to review Risk Records and ensure timely remediation, aligning with enterprise security policies and regulatory requirements.

The ideal candidate will drive data continuity, monitor queues, and educate stakeholders on information security and remediation steps to meet compliance standards.

Qualifications

• Undergraduate degree or equivalent experience.
• Experience in internal audit and/or risk assessment.
• Understanding of regulatory mandates and security models (GDPR, ISO 27001, HIPAA, SOX, PCI, GLBA, NIST).

Responsibilities

• Leverage technical resources across the organization to obtain technical review and input on Risk Records.
• Attend meetings to discuss Risk Records and articulate details for review.
• Collaborate with Risk Services to support modernization, relationship management, and data continuity.
• Ensure timely deliveries per SLA and manage records per defined queues and SLAs.
• Educate the business on information security and remediation requirements to achieve compliance.

Skills

Internal audit experience

Risk assessment

Regulatory knowledge

Information security

Education

Undergraduate degree

Job description

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities

• Effectively leverage technical resources around the organization, including segment leads, managers, SISOs, BISOs, CISOs, Security Architects, Cloud Review, PCI Review, Audit & Compliance, other ad hoc technical support to get technical review and input on Risk Records
• Attend meetings where technical support can engage with the team on Risk Records and be able to articulate the details of the Risk Record you are bringing up for their review
• Collaborate with the team to support Risk Services modernization, relationship management, and data continuity efforts
• Ensure timely deliveries for all assigned tasks as per SLA
• Maintain eGRC Risk Record queue concordant with team determined SLAs (1-3 day for initial reach out on newly Assigned records, 7-10 day reach out on renewals)
• Proper management of records that are waiting for response (5-day, 3-day, 1 day, close for non-response), as well as updating work logs with information and moving records appropriately between statuses
• Effectively manage remediation tasks and expired risk records as part of core queue management (5-7-day SLA for updating tasks, questionnaires, and records)
• Educate the business where applicable on information security, drive remediation and importance of compliance
  • examines records on IT systems for potential threats to its security based on our company policies/regulations
  • develops quality standards and remediation tasks with validation techniques (remediation checkpoints),
  • makes recommendations concerning software/system quality to become compliant with our policies/regulations
• Work closely with local manger and segment lead to remove blockers
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

Required Qualifications

• Undergraduate degree or equivalent experience
• Relevant business experience, including internal audit and/ or Risk Assessment experience
• Understanding of regulatory mandates and security models to include GDPR, ISO 27001, HIPAA, SOX, PCI, GLBA, NIST

At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.

Optum is a drug-free workplace. © 2026 Optum Global Solutions (Philippines) Inc. All rights reserved.