The Role
Lead security governance, vulnerability management, incident response, and remediation programs for a large application portfolio. Oversee security operations, reporting, automation, and team development while partnering with engineering to reduce risk and improve cloud security posture.
Summary Generated by Built In
Requisition Number: 2376411
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
Required Qualifications:
Preferred Qualifications:
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.
Primary Responsibilities:
- Security Governance & Compliance Leadership
- Lead execution of security compliance programs, enterprise security initiatives, and remediation activities across the O&E portfolio
- Ensure adherence to enterprise security policies, standards, regulatory requirements, and audit commitments
- Drive accountability for security-related MBOs, risk reduction objectives, and security performance metrics
- Establish governance processes that improve visibility, ownership, escalation management, and remediation execution across engineering organizations
- Vulnerability Management & Risk Remediation
- Own operational oversight of Critical, High, and Medium vulnerability remediation programs
- Drive timely remediation of known exploited vulnerabilities, security findings, configuration weaknesses, policy violations, and cloud security risks
- Monitor remediation aging, exception approvals, and risk acceptance activities to ensure compliance with enterprise expectations
- Partner with engineering teams to eliminate recurring security issues and improve long-term security posture
- Security Operations & Incident Management
- Oversee security incident coordination, escalation, and response activities impacting O&E applications
- Ensure security impact assessments are performed for major operational incidents and technology events
- Drive post-incident reviews focused on prevention, control improvements, and risk mitigation
- Support threat monitoring, operational readiness, and proactive risk identification efforts
- Team Leadership & Organizational Development
- Provide direct leadership, coaching, and performance management for India-based security resources and contractors
- Establish clear operational priorities, workload management, and accountability frameworks
- Build organizational depth, succession coverage, and scalable operating practices for the security function
- Develop team capabilities in vulnerability management, security operations, compliance governance, automation, and cloud security
- Foster a culture of operational excellence, continuous improvement, and proactive risk management
- Security Reporting & Executive Visibility
- Own security operational reporting, dashboards, scorecards, and leadership communications
- Prepare executive-level reporting related to vulnerabilities, remediation performance, risk records, compliance status, and emerging threats
- Track and communicate security trends, operational risks, and remediation progress across the portfolio
- Drive data-driven decision making through actionable metrics and performance indicators
- Security Automation & Modernization
- Identify opportunities to automate compliance tracking, vulnerability remediation workflows, reporting, and operational processes
- Partner with AI Ops, Cloud, and Engineering teams to improve operational efficiency through automation and tooling
- Support security enablement activities associated with cloud transformation, modernization programs, and emerging technology initiatives
- Drive adoption of scalable security operating models that support continued portfolio growth
- Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
Required Qualifications:
- Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline
- 8+ years of experience in Security Operations, Vulnerability Management, Information Security, Technology Operations, or related fields
- 3+ years of people leadership or team management experience
- Experience managing security compliance, remediation, risk management, or operational security programs at enterprise scale
- Proven experience partnering with engineering and technology teams to drive remediation and operational improvements
- Solid knowledge of:
- Vulnerability Management
- Security Governance
- Risk Management
- Incident Response
- Compliance Programs
- Cloud Security
- Security Metrics & Reporting
- Demonstrated solid communication, stakeholder management, and program execution skills
Preferred Qualifications:
- Experience supporting large-scale application portfolios in highly regulated industries
- Experience with Azure, AWS, Kubernetes, and cloud-native security controls
- Experience driving automation initiatives using scripting, workflow automation, or AI-enabled operational tooling
- Familiarity with ServiceNow, vulnerability management platforms, eGRC tools, Power BI, and security reporting solutions
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.
Skills Required
- Bachelor's degree in Computer Science, Information Security, Engineering, or related discipline
- 8+ years of experience in Security Operations, Vulnerability Management, Information Security, Technology Operations, or related fields
- 3+ years of people leadership or team management experience
- Experience managing security compliance, remediation, risk management, or operational security programs at enterprise scale
- Proven experience partnering with engineering and technology teams to drive remediation and operational improvements
- Knowledge of Vulnerability Management
- Knowledge of Security Governance
- Knowledge of Risk Management
- Knowledge of Incident Response
- Knowledge of Compliance Programs
- Knowledge of Cloud Security
- Knowledge of Security Metrics & Reporting
- Demonstrated communication, stakeholder management, and program execution skills
- Experience supporting large-scale application portfolios in highly regulated industries
- Experience with Azure, AWS, Kubernetes, and cloud-native security controls
- Experience driving automation initiatives using scripting, workflow automation, or AI-enabled operational tooling
- Familiarity with ServiceNow, vulnerability management platforms, eGRC tools, Power BI, and security reporting solutions
Optum Compensation & Benefits Highlights
-
Healthcare Strength — Official materials highlight copay and HSA medical plan choices with in‑network preventive care at 100%, prescription coverage, and low/no‑cost virtual visits, plus company HSA contributions. Dental preventive services are 100% in network, and mental health resources include an EAP and premium Calm access.
-
Parental & Family Support — Programs include six weeks paid parental leave, up to two weeks paid caregiver leave, and Bright Horizons back‑up care with enhanced family supports. Adoption assistance up to $10,000 for full‑time employees reinforces family‑oriented benefits.
-
Equity Value & Accessibility — Financial benefits include an Employee Stock Purchase Plan at a 10% discount, expanding access to equity ownership.
Optum Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Optum, part of the UnitedHealth Group family of businesses, is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together. At Optum, we support your well-being with an understanding team, extensive benefits and rewarding opportunities. By joining us, you’ll have the resources to drive system transformation while we help you take care of your future. We recognize the power of connection to drive change, improve efficiency and make a difference in health care. Join a team where your skills and ideas can make an impact and where collaboration is key to creating technology that produces healthier outcomes.
Gallery
Optum Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Optum has three workplace models that balance the needs of the business and the responsibilities of each role. These models, core on‑site (5 days/week), hybrid (4 days/week) and telecommute or fully remote, vary by country, role and location.
Typical time on-site:
Not Specified
