Senior InfoSec Risk Auditor — Remote Impact

UnitedHealth-Grou; Eden Prairie (MN); Remote; USD 92,000 - 164,000; Full time

Benefits offered by this job

Telecommute option

Benefits package

Equity stock purchase

401k

Job summary

UnitedHealth Group is seeking a Senior Information Security Risk Auditor to assess control design and operating effectiveness across identity, access, network, cloud, and data protection domains. You will validate controls against SOX, SOC 2, NYDFS and leading frameworks like NIST CSF and ISO/IEC 27001. The role offers telecommute within the U.S.

and a comprehensive benefits package. You will drive timely remediation of deficiencies and support enterprise GRC improvements with dashboards and

Qualifications

• 5+ years in IT auditing, information security risk management, or IT regulatory compliance.
• 3+ years collaborating with stakeholders and delivering measurable results.
• 3+ years implementing, monitoring or auditing IT general controls.
• Knowledge of Agile, IT operations and security risks.
• Experience with enterprise GRC platforms and control testing workflows.

Responsibilities

• Plan and execute risk-based assessments of control design and operating effectiveness across critical security domains.
• Validate controls against regulatory obligations (SOX, SOC 2, NYDFS) and frameworks (NIST CSF, ISO/IEC 27001).
• Review control documentation and evidence for completeness and accuracy.
• Coordinate data collection, reports, and QA of submitted evidence.
• Drive timely closure of control deficiencies within SLAs.
• Develop executive-ready summaries on control effectiveness and actions.
• Improve control assurance through dashboards, automation, and integration with GRC platforms.
• Promote compliance with laws and contractual obligations across UnitedHealth Group.

Skills

IT auditing

IT regulatory compliance

Stakeholder collaboration

IT general controls

GRC platforms

Education

Bachelor's degree

Tools

GRC platforms

Job description

UnitedHealth Group is seeking a Senior Information Security Risk Auditor to assess control design and operating effectiveness across identity, access, network, cloud, and data protection domains. You will validate controls against SOX, SOC 2, NYDFS and leading frameworks like NIST CSF and ISO/IEC 27001. The role offers telecommute within the U.S.

and a comprehensive benefits package. You will drive timely remediation of deficiencies and support enterprise GRC improvements with dashboards and