Sr. Info Security Risk Analyst (Security/Auditing Assessment)

Optum, a UnitedHealth Group Company; Metro Manila; Hybrid; PHP 1,000,000 - 1,800,000; Full time

Benefits offered by this job

Hybrid

Laptop/Computer Provided by theCompany

Market Total Rewards Package

Retirement Plan

Medical Plan (HMO) from Day 1 of emplo

Dental, Medical, and Optical Reimburse

Life and Disability Insurance

Paid Time-Off Benefits

Sick Leave Conversion

Tuition Fee Reimbursement

Employee Assistance Program (EAP)

Annual Performance Based Merit Increa

Employee Recognition

Training and Staff Development

Employee Referral Program

Employee Volunteerism Opportunity

All Mandatory Statutory Benefits

Job summary

Optum, a UnitedHealth Group company, is seeking a Senior Compliance Auditor in Metro Manila. You will lead third-party risk assessments, enforce security controls, and guide remediation with minimal supervision. The role requires auditing experience, familiarity with NIST/ISO27001, HIPAA/GLBA, and SOC reports.

Hybrid work setup, with comprehensive benefits and a strong focus on security governance. Ideal candidates bring experience in SSAE 16, SOC 2, PCI DSS, and NY Cyber Security audits, plus

Qualifications

• Undergraduate degree or equivalent experience.
• Experience in auditing/security assessments
• Security frameworks including NIST, ISO27001/HITRUST/ITIL/COBIT and acts such as HIPAA/GLBA
• Experience in examining SSAE 16 Audit, SOC 2, PCI DSS, NY Cyber Security and other security audit reports
• Knowledge of security products (web/email filtering, disk encryption, vulnerability testing, antivirus, DLP, firewall)
• Knowledge of security development methodologies, application security, and OWASP Top 10
• Ability to document assessment work papers and prepare assessment reports
• Ability to manage third-party assessments independently with minimal supervision
• Preferred: CISA, CISSP, CRISC, ISO 27001, Security+

Responsibilities

• Lead third-party assessments and follow-up activities with strategic third-party relationships
• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships
• Understand and enforce General Computing Controls of third-party organization structure
• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action
• Develop and maintain procedure documentation
• Execution of reporting (Daily/Weekly/Monthly)

Skills

Auditing / security assessments

Security frameworks (NIST, ISO27001,/H

HIPAA / GLBA compliance

Security products knowledge (filtering

OWASP Top 10 / app security

Assessment documentation

Third-party assessment management

CISA / CISSP / CRISC (preferred)

Education

Undergraduate degree or equivalent experience

Job description

Primary Responsibilities

• Lead third-party assessments and follow-up activities with strategic third-party relationships

• Communicate professionally with third-party stakeholders/end users through multiple communication methods, building trusting relationships

• Understand and enforce General Computing Controls of third-party organization structure

• Identify security administration deficiencies, recommend improvements, and assist to implement corrective action

• Develop and maintain procedure documentation

• Execution of reporting (Daily/Weekly/Monthly)

Job Qualifications

• Undergraduate degree or equivalent experience.

• What skills/attributes are a must have:

  • Experience in auditing/security assessments
  • Security expertise including knowledge on different security risk assessment frameworks (NIST), standards (ISO27001/HITRUST/ITIL/COBIT), and act such as (HIPAA/GLBA).
  • Experience in examining the SSAE 16 Audit, SOC 2, PCI DSS, NY Cyber Security and other security audit report

• Knowledge and understanding of different security products (web/email filtering, disk encryption, vulnerability testing, antivirus, DLP, firewall etc.)

• Knowledge on technology/software development methodologies, application security, and OWASP Top 10 guidelines

• Ability to document assessment work papers and preparing assessment report

• Ability to manage third-party assessment independently with minimal supervision

  Preferred:

  CISA, CISSP, CRISC, ISO 27001, Security+, ISC2 CC

WHAT WE OFFER

• Hybrid

• Laptop/Computer Provided by the Company

• Market Total Rewards Package

• Retirement Plan

• Medical Plan (HMO) from Day 1 of employment

• Dental, Medical, and Optical Reimbursements

• Life and Disability Insurance

• Paid Time-Off Benefits

• Sick Leave Conversion

• Tuition Fee Reimbursement

• Employee Assistance Program (EAP)

• Annual Performance Based Merit Increases

• Employee Recognition

• Training and Staff Development

• Employee Referral Program

• Employee Volunteerism Opportunity

• All Mandatory Statutory Benefits

Who we are

• Optumis the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.

• UnitedHealth Groupis a health care and well-being company with a mission to help people live healthier lives and help make the health system work better for everyone.

• We’re a leading health solution and care delivery organization. Our work is complex, but our mission is simple: create a healthier world, with you at the center.

• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.

• Elevate your career with a leading health care company while improving lives.