Vendor Governance & Risk Analyst

UnitedHealth Group; Eden Prairie (MN); On-site; USD 73,000 - 130,000; Full time

Benefits offered by this job

Comprehensive benefits

Career development opportunities

Equity stock purchase

401k contribution

Job summary

Optum Bank, part of UnitedHealth Group, seeks a Vendor Management Analyst to oversee third-party relationships, strengthen regulatory governance, and manage vendor risk. The role emphasizes collaboration with compliance, legal, procurement, IT, and other departments to ensure SLAs, controls, and accountability.

The candidate brings 3+ years in vendor management within financial services, plus 2+ years in audit compliance and GRC.

Qualifications

• 3+ years of vendor management in a financial organization.
• 2+ years of internal/external audit compliance support (FDIC, SOC).
• 2+ years of GRC (Governance, Risk & Compliance) experience.
• 2+ years of regulatory security data guidance (PII/PCI/PHI).
• 2+ years of HIPAA, PCI, HITRUST, SOX experience.

Responsibilities

• Review third-party certifications (SOC 2, ISO 27001, HITRUST) for gaps.
• Track regulatory developments to ensure vendor compliance with laws.
• Validate vendor performance and SLAs.
• Prepare risk reports for senior leadership and auditors.
• Collaborate with stakeholders to assess policy alignment.
• Monitor vendor program performance against SLAs and KPIs.
• Remediate issues with vendors and internal teams.
• Develop and maintain third-party governance frameworks.

Skills

Vendor management

Audit compliance

GRC

Regulatory data security

HIPAA/PCI knowledge

Education

Advanced degree or certifications in relevant field

Job description

Optum Bank, part of UnitedHealth Group, seeks a Vendor Management Analyst to oversee third-party relationships, strengthen regulatory governance, and manage vendor risk. The role emphasizes collaboration with compliance, legal, procurement, IT, and other departments to ensure SLAs, controls, and accountability.

The candidate brings 3+ years in vendor management within financial services, plus 2+ years in audit compliance and GRC.