Senior InfoSec Risk Analyst - Hybrid, Compliance Leader

Optum, a UnitedHealth Group Company; Metro Manila; Hybride; PHP 1 000 000 - 1 800 000; Plein temps

Avantages offerts par ce poste

Hybrid

Laptop/Computer Provided by theCompany

Market Total Rewards Package

Retirement Plan

Medical Plan (HMO) from Day 1 of emplo

Dental, Medical, and Optical Reimburse

Life and Disability Insurance

Paid Time-Off Benefits

Sick Leave Conversion

Tuition Fee Reimbursement

Employee Assistance Program (EAP)

Annual Performance Based Merit Increa

Employee Recognition

Training and Staff Development

Employee Referral Program

Employee Volunteerism Opportunity

All Mandatory Statutory Benefits

Résumé du poste

Optum, a UnitedHealth Group company, is seeking a Senior Compliance Auditor in Metro Manila. You will lead third-party risk assessments, enforce security controls, and guide remediation with minimal supervision. The role requires auditing experience, familiarity with NIST/ISO27001, HIPAA/GLBA, and SOC reports.

Hybrid work setup, with comprehensive benefits and a strong focus on security governance. Ideal candidates bring experience in SSAE 16, SOC 2, PCI DSS, and NY Cyber Security audits, plus

Qualifications

• Undergraduate degree or equivalent experience.
• Experience in auditing/security assessments
• Security frameworks including NIST, ISO27001/HITRUST/ITIL/COBIT and acts such as HIPAA/GLBA
• Experience in examining SSAE 16 Audit, SOC 2, PCI DSS, NY Cyber Security and other security audit reports
• Knowledge of security products (web/email filtering, disk encryption, vulnerability testing, antivirus, DLP, firewall)
• Knowledge of security development methodologies, application security, and OWASP Top 10
• Ability to document assessment work papers and prepare assessment reports
• Ability to manage third-party assessments independently with minimal supervision
• Preferred: CISA, CISSP, CRISC, ISO 27001, Security+

Responsabilités

• Lead third-party assessments and follow-up activities with strategic third-party relationships
• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships
• Understand and enforce General Computing Controls of third-party organization structure
• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action
• Develop and maintain procedure documentation
• Execution of reporting (Daily/Weekly/Monthly)

Connaissances

Auditing / security assessments

Security frameworks (NIST, ISO27001,/H

HIPAA / GLBA compliance

Security products knowledge (filtering

OWASP Top 10 / app security

Assessment documentation

Third-party assessment management

CISA / CISSP / CRISC (preferred)

Formation

Undergraduate degree or equivalent experience

Description du poste

Optum, a UnitedHealth Group company, is seeking a Senior Compliance Auditor in Metro Manila. You will lead third-party risk assessments, enforce security controls, and guide remediation with minimal supervision. The role requires auditing experience, familiarity with NIST/ISO27001, HIPAA/GLBA, and SOC reports.

Hybrid work setup, with comprehensive benefits and a strong focus on security governance. Ideal candidates bring experience in SSAE 16, SOC 2, PCI DSS, and NY Cyber Security audits, plus