Remote Senior InfoSec Risk Auditor

UnitedHealth Group; Eden Prairie (MN); Hybrid; USD 92,000 - 164,000; Full time

Benefits offered by this job

Comprehensive benefits

Equity stock purchase

401k contribution

Job summary

UnitedHealth Group in Eden Prairie, MN is seeking an experienced IT Audit/Regulatory Compliance professional to assess control design and effectiveness across security domains. You will validate controls against SOX, SOC 2, NYDFS and major frameworks, review evidence, and drive remediation within SLAs.

Role requires collaboration with executives and internal customers, experience with IT general controls, and familiarity with GRC platforms.

Qualifications

• 5+ years of experience in IT auditing and information security risk management.
• Experience communicating with executives and stakeholders with measurable results.
• Hands-on experience implementing IT general controls in complex environments.

Responsibilities

• Plan and execute risk-based assessments of control design and operating effectiveness across critical security domains.
• Validate that controls mitigate risks and align with SOX, SOC 2, NYDFS and frameworks like NIST CSF/ISO 27001.
• Review control documentation, evidence, and automation guardrails for completeness and accuracy.
• Support data collection for regulatory obligations, coordinate reports, and QA submitted evidence.
• Drive timely closure of control deficiencies identified during audits or reviews.
• Facilitate control governance meetings and develop executive-ready summaries on risk and actions.
• Ensure interoperability between governance processes and GRC platforms, improving assurance via dashboards.
• Establish standard procedures to promote compliance across UnitedHealth Group.

Skills

IT auditing

IT risk management

Stakeholder collaboration

IT general controls

Agile methodologies

GRC platforms

Education

Bachelor's degree or equivalent experience

Job description

UnitedHealth Group in Eden Prairie, MN is seeking an experienced IT Audit/Regulatory Compliance professional to assess control design and effectiveness across security domains. You will validate controls against SOX, SOC 2, NYDFS and major frameworks, review evidence, and drive remediation within SLAs.

Role requires collaboration with executives and internal customers, experience with IT general controls, and familiarity with GRC platforms.