Remote Senior Cloud Security & Compliance Auditor

UnitedHealth Group; Eden Prairie (MN); Remote; USD 92,000 - 164,000; Full time

Benefits offered by this job

Telecommuter policy

Comprehensive benefits package

Equity stock purchase and 401k

Job summary

UnitedHealth Group is seeking a Senior Information Security Risk Auditor to maintain PCI compliance for Optum Public Cloud and oversee internal/external audits. The role partners with engineering, products, and operations to translate requirements into cloud solutions and leverage AI tools for automated remediation and evidence collection.

You will drive continuous improvement, work across security domains, and influence strategic decisions.

Qualifications

• 5+ years hands-on experience with PCI DSS implementation, monitoring, and validation.
• 3+ years of cloud security and compliance across PCI DSS, SOC 2, HIPAA, HITRUST, or NIST 800-53.
• 3+ years of experience managing and coordinating internal and external audits.
• 2+ years of working with cloud architecture and interpreting compliance/technical requirements into solutions.

Responsibilities

• Maintain Optum Public Cloud PCI compliance certification and security policies.
• Lead internal and external audits; coordinate across cloud security domains.
• Translate security requirements into cloud architecture and evidence (logs, configurations).
• Drive automation for remediation, evidence collection, and continuous control tuning.
• Influence stakeholders with AI insights to achieve measurable business outcomes.
• Remediate findings with engineering/ops and support customer requests.

Skills

PCI DSS

Cloud security

Audits

Cloud architecture

Education

Bachelor's degree or 4+ years equivalent experience

Tools

CISA

CISSP

CCSP

AWS

Azure

GCP

Job description

UnitedHealth Group is seeking a Senior Information Security Risk Auditor to maintain PCI compliance for Optum Public Cloud and oversee internal/external audits. The role partners with engineering, products, and operations to translate requirements into cloud solutions and leverage AI tools for automated remediation and evidence collection.

You will drive continuous improvement, work across security domains, and influence strategic decisions.