Vendor Risk & Compliance Analyst - Equity & 401k

Coastal Cardiology PC; Eden Prairie (MN); On-site; USD 73,000 - 130,000; Full time

Benefits offered by this job

Comprehensive benefits

Incentive programs

401k and stock purchase

Job summary

UnitedHealth Group in Minnesota seeks a Vendor Management and Risk Analyst to oversee third-party relationships, drive risk mitigation and ensure regulatory compliance across vendor services.

You will review certifications, monitor SLAs and prepare leadership reports, collaborating with Legal, Procurement and IT to strengthen governance and controls. The role requires strong analytical skills, teamwork and attention to detail in a fast-paced environment.

Qualifications

• 3+ years vendor management experience within a financial organization.
• 2+ years of audit compliance support (FDIC, FDICIA, GLBA, SOC).
• 2+ years of GRC (Governance, Risk & Compliance) experience.
• 2+ years in security of sensitive data (PII, PCI, PHI).
• 2+ years HIPAA, PCI, HITRUST, SOX experience.

Responsibilities

• Review third-party certifications (SOC 2, ISO 27001, HITRUST) to identify gaps or risks.
• Track regulatory developments and ensure vendor compliance with laws and guidelines (FDIC, CFPB).
• Validate vendor performance and SLAs.
• Prepare regular vendor risk reports for senior leadership and auditors.
• Collaborate with internal stakeholders to assess policy alignment and risk tolerance.
• Monitor vendor program performance against SLAs, KPIs, and risk plans.
• Partner with Procurement, Legal, IT and others for holistic risk management.
• Provide training on TPRM policies and tools.
• Maintain centralized third-party documentation repository.
• Remediate identified issues with vendors and internal teams.
• Develop and maintain third-party governance frameworks.

Skills

Vendor management

Audit compliance

GRC

Regulatory compliance

PII/PHI security

Education

Advanced degree or certifications (CRVPM, CTPRP, CISSP, or CISA)

Tools

SOC 2

ISO 27001

HITRUST

Job description

UnitedHealth Group in Minnesota seeks a Vendor Management and Risk Analyst to oversee third-party relationships, drive risk mitigation and ensure regulatory compliance across vendor services.

You will review certifications, monitor SLAs and prepare leadership reports, collaborating with Legal, Procurement and IT to strengthen governance and controls. The role requires strong analytical skills, teamwork and attention to detail in a fast-paced environment.