Senior Manager Cybersecurity Risk - Remote

Sr. Manager, Cybersecurity Risk

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

The Sr. Manager, Cybersecurity Risk leads enterprise risk and compliance initiatives for commercial clients, aligning security strategy with regulatory requirements, business objectives, and client needs. This role ensures the integrity of systems and processes through policy development, risk assessments, and audit coordination. This role will have supervisory responsibilities for managing a Security Risk team.

You'll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.

Primary Responsibilities:

• Direct the Risk Services team in implementing risk management programs for commercial clients, ensuring tailored solutions that address client-specific requirements
• Develop and enforce compliance policies aligned with legal and industry standards
• Conduct and manage risk assessments and implement mitigation strategies
• Collaborate with internal teams and commercial clients to deploy effective controls that meet client expectations and regulatory standards
• Monitor regulatory changes and adjust risk posture accordingly
• Oversee vendor risk and ensure third-party compliance
• Lead incident response and post-incident analysis
• Deliver risk management training to both internal stakeholders and commercial clients, enhancing client understanding of cybersecurity best practices
• Maintain GRC platform oversight and ensure accurate documentation
• Liaise and coordinate with auditors, CISOs, and client representatives to ensure transparent communication and alignment on risk management objectives

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• 5+ years in risk management or related field, with leadership experience
• Solid knowledge of data privacy, security regulations, and compliance frameworks
• Proven ability to assess risk and implement controls
• Proven effective communicator across technical and business audiences, as well as, executive communications/presentations

Preferred Qualifications:

• Bachelor's degree in a relevant field
• Certifications: CISSP, CISM, HITRUST, CRISC, CGEIT, GRCP
• Experience with ISO, NIST, PCI, SOX, HIPAA, GDPR, GLBA
• Experience managing vendor relationships and external audits
• Knowledge of cloud environments (Azure). Strong analytical, organizational, and problem-solving skills
• Familiarity with GRC platforms (Censinet)

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $110,200 to $188,800 annually based on full-time employment. We comply with all minimum wage laws as applicable.