Information Security Officer - Remote

For those who want to invent the future of health care, here's your opportunity. We're going beyond basic care to health programs integrated across the entire continuum of care. Join us in making healthcare work better for everyone through people-led, responsible AI while Caring. Connecting. Growing together. 

 

The Information Security Officer serves as a Subject Matter Expert (SME) for cybersecurity across Optum Serve. Responsibilities include ensuring all information security needs are implemented promptly, requiring collaboration with the Infrastructure and Operations team, ESRO, and Optum Serve Information Security team. This role ensures alignment with ESRO standards and government frameworks, such as NIST SP 800-37, NIST SP  800-53, NIST SP 800-171, and FedRAMP to obtain and maintain ATOs, FedRAMP authorizations, and CMMC Level 2 certifications. The candidate will manage security controls to safeguard Optum Serve’s networks and systems.

 

The Information Security Officer will address all government and client security inquiries related to security and compliance. This position entails coordinating, developing, updating, and maintaining security documentation for CMMC Level 2 Certification, including the ATO package (SSP, CP, CMP, IRP, POAM, etc.) and its annual updates. The role also involves managing and reporting system risks and vulnerabilities, coordinating third-party audits, and overseeing annual penetration tests.

 

You’ll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges.    

 

Primary Responsibilities:

• Serves as a Subject Matter Expert (SME) for information security governance, risk management, and compliance in accordance with the NIST Risk Management Framework
• Liaise with Business and IT Groups in security compliance, design, planning, implementation, and continuous monitoring phases of IT and business-related projects 
• Create and maintain new and existing standard operating procedures, work with multi-functional team members to maintain high-quality work standards 
• Solid understanding of cloud computing models, management of cloud-based environments, and cloud providers
• Solid understanding of security architecture, operating systems, databases, networks, applications, and security tools
• Solid knowledge and experience with regulatory frameworks such as NIST 800-53, NIST 800-171, CMMC, FedRAMP and DoD Risk Management Framework (RMF)
• Solid knowledge and experience with security control compliance/implementation with Security Technical Implementation Guides (STIGs), CMMC certification, and the ATO processes to include Plan of Action and Milestones (POAM) management
• Develop and maintain security documentation to include but not limited to System Security Plan (SSP), Contingency Plans, Configuration Management Plan, and Disaster Recovery Plan
• Facilitate regular vulnerability and control weakness discussions within the team to identify potential security risks and weaknesses in systems and networks for timely remediation and documentation

 

You’ll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in. 

%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E%3Cstrong%3ERequired Qualifications:%3C/strong%3E%3C/span%3E%3C/p%3E%3Cul%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3EBachelor’s degree in information security, Cybersecurity, Computer Science, or equivalent%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E5+years of information security experience%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E3+ years of FISMA related experience%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E3+ years of experience with Assessment and Authorization (A%26amp;A) and Independent Verification %26amp; Validation (IV%26amp;V)%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3ESolid understanding of cloud computing models, management of cloud-based environments, and cloud providers%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3ESolid understanding of security architecture, operating systems, databases, networks, applications, and security tools%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3ESolid knowledge and experience with regulatory frameworks such as NIST 800-53, NIST 800-171, CMMC, FedRAMP and DoD Risk Management Framework (RMF)%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3ESolid knowledge and experience with security control compliance/implementation with Security Technical Implementation Guides (STIGs) and the Authorization To Operate (ATO) process to include Plan of Action and Milestones (POAM) management%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3EUS Citizenship%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3EIf you are offered this position, you will be required to provide extensive personal information to obtain and maintain a suitability or determination of eligibility for a Confidential/Secret or Top Secret security clearance as a condition of your employment%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3EGood standing with at least one of the following certifications: Certified Information Systems Security Professional (CISSP) or Certified Information Systems Manager (CISM)%3C/span%3E%3C/li%3E%3Cli%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E10% Travel%3C/span%3E%3Cbr%3E%26nbsp;%3C/li%3E%3C/ul%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E*All employees working remotely will be required to adhere to UnitedHealth Group’s Telecommuter Policy%3C/span%3E%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3EPay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you’ll find a far-reaching choice of benefits and incentives. The salary for this role will range from %2491,700 - %24163,700 annually based on full-time employment. We comply with all minimum wage laws as applicable.%3C/span%3E%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:start;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E%3Cstrong%3EApplication Deadline: %3C/strong%3EThis will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.%3C/span%3E%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:rgb(0, 0, 0);font-family:%26quot;Open Sans%26quot;, %26quot;Segoe UI%26quot;, Frutiger, %26quot;Frutiger Linotype%26quot;, %26quot;Dejavu Sans%26quot;, %26quot;Helvetica Neue%26quot;, Arial, sans-serif;font-size:13.02px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px 0px 12px;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:black;font-family:Tahoma;font-size:10pt;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0pt 0px 7pt;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E%3Ci%3EAt UnitedHealth Group, our mission is to help people live healthier lives and help make the health system work better for everyone. Together, we are shaping the future of healthcare by harnessing technology and innovation to make care simpler to navigate, more affordable and more connected for the people we serve. We are committed to creating an inclusive workplace where everyone feels welcomed, valued, heard and respected, empowering people to bring their authentic selves to work and strengthening our collective impact through diverse talents, backgrounds, experiences and perspectives.%3C/i%3E%3C/span%3E%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:black;font-family:Tahoma;font-size:10pt;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0pt 0px 7pt;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:black;font-family:Tahoma;font-size:10pt;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0pt 0px 7pt;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E%3Ci%3EUnitedHealth Group and its affiliated brands are an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.%3C/i%3E%3C/span%3E%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:black;font-family:Tahoma;font-size:10pt;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0pt 0px 7pt;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%26nbsp;%3C/p%3E%3Cp style=%22-webkit-text-stroke-width:0px;background-color:rgb(255, 255, 255);color:black;font-family:Tahoma;font-size:10pt;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0pt 0px 7pt;orphans:2;text-align:center;text-decoration-color:initial;text-decoration-style:initial;text-decoration-thickness:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;%22%3E%3Cspan style=%22color:black;font-family:Tahoma, Geneva, sans-serif;font-size:10px;%22%3E%3Ci%3EUnitedHealth Group and its affiliated brands are a drug-free workplace. Candidates%26nbsp;are required to%26nbsp;pass a drug test before beginning employment.%3C/i%3E%3C/span%3E%3C/p%3E

Job Details
Job: Security Ops Engineering
Primary Location: US-MN-Eden Prairie
Organization: OptumServe Admin
Schedule: Full-time
Number of Openings: 1