Senior Information Security Engineering Consultant

Responsibilities

• Develop and maintain GRC frameworks aligned with organizational goals and regulatory requirements
• Perform third party risk assessments with an emphasis on US-based healthcare information technology
• Conduct control testing to evaluate maturity and effectiveness of security controls (HIPAA/HITRUST/NIST 800-53)
• Design and implement a consistent Vendor Risk Management (VRM) program
• Conduct pre-contract due diligence and ongoing vendor solution risk assessments
• Develop mitigation plans and partner with internal stakeholders to monitor vendors post-contract
• Create executive summaries and reporting for senior leadership

Requirements

• Bachelor's degree in information security, Risk Management, or related field
• 5+ years of experience in Governance, Risk & Compliance and/or Third-Party Risk Management
• Solid understanding of risk management frameworks (HIPAA, HITRUST, NIST 800-53)
• Proficiency in GRC platforms and vendor risk management tools
• Strong analytical skills and ability to interpret large datasets
• Excellent verbal and written communication skills

Preferred Qualifications

• Experience in developing risk frameworks and dashboards
• Familiarity with healthcare technologies such as EHR systems, biomedical devices, and SaaS
• Familiarity with procurement processes and vendor governance
• Exposure to federal/state regulatory compliance requirements

About the Company

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best.