UnitedHealth Group is a healthcare and well-being company that’s dedicated to improving the health outcomes of millions around the world. We are comprised of
Associate Info Security Risk Auditor
Location
United States
Posted
38 days ago
Salary
$29 - $52 / hour
Seniority
Mid Level
No structured requirement data.
Job Description
Associate Info Security Risk Auditor
UnitedHealth Group
Role Description The Associate Information Security Risk Auditor (Policy Governance Lifecycle) is an entry-level to early-career contributor responsible for supporting assessments of the enterprise’s information security policy and standards lifecycle. This role assists in evaluating policy governance processes, reviewing control implementation evidence, and monitoring compliance to ensure alignment with enterprise risk appetite, regulatory obligations, and leading frameworks (e.g., NIST CSF, ISO/IEC 27001). The associate works under guidance from senior auditors and collaborates with policy owners, control operators, and risk teams to identify gaps and recommend improvements. Strong attention to detail, willingness to learn, and clear communication skills are essential. You will enjoy the flexibility to telecommute* from anywhere within the U.S. as you take on some tough challenges. Key Responsibilities - Policy Governance & Lifecycle Support - Assist in assessments of policy lifecycle processes (draft → approve → publish → monitor → retire) - Help maintain audit-ready documentation and track policy adherence metrics - Support validation that policies map to applicable frameworks and regulatory requirements - Compliance & Evidence Review - Perform basic compliance checks and assist in reporting adherence rates and exceptions - Review evidence supporting control effectiveness under supervision and escalate gaps for remediation - Support alignment verification against frameworks (e.g., NIST CSF, ISO 27001) and obligations (e.g., SOX, SOC 2) - Stakeholder Support & Reporting - Prepare draft audit reports and dashboards for management review - Participate in governance meetings as an observer and provide input when requested - Assist in awareness efforts related to policy requirements and accountability - Core Responsibilities - Support policy governance lifecycle audits and compliance reviews - Ensure documentation and evidence traceability are complete and accurate - Collaborate with risk and compliance teams to track remediation progress - Contribute to process improvement initiatives, including automation opportunities Core Competencies - Governance Knowledge: Basic understanding of policy lifecycle and regulatory frameworks (NIST, ISO, SOX) - Risk & Compliance Awareness: Ability to learn and apply concepts of policy-to-control mapping and evidence adequacy - Analytical Skills: Strong attention to detail in reviewing compliance metrics and audit evidence - Communication: Ability to prepare clear reports and communicate effectively - Tool Familiarity: Exposure to GRC platforms and willingness to learn automation concepts Qualifications - Bachelor’s degree in Information Security, Risk Management, or Business, or related field - 6+ months of experience in information security auditing, compliance, or risk management (internship experience acceptable) Preferred Qualifications - Certifications such as CISA, CRISC - Familiarity with GRC tools and evidence collection processes - Ability to work collaboratively across teams in a matrixed environment Benefits - Comprehensive benefits package - Incentive and recognition programs - Equity stock purchase - 401k contribution (all benefits are subject to eligibility requirements) Application Deadline This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.
Related Guides
Related Categories
Related Job Pages
More Risk Jobs
Senior Manager, Payment Integrity - Governance
Centene CorporationTransforming the health of the communities we serve, one person at a time.
Title: Senior Manager, Payment Integrity - Governance locations Remote-MO Remote-NC Remote-TX Remote-IL Remote-FL Remote-CA time type Full time job requisition id 1639366 Job Description: You could be the one who changes everything for our 28 million members. Centene is transforming the health of our communities, one person at a time. As a diversified, national organization, you’ll have access to competitive benefits including a fresh perspective on workplace flexibility. Position Purpose: Oversee and monitor the performance of both internal and external cost recovery and cost containment initiatives according to targeted project metrics and forecasted recovery and cost avoidance goals for each Health Plan. - Manage internal and external vendors cost avoidance and cost recovery initiatives. Partner with health plans to identify and contain cost through collaboration with national vendors for each recovery category - Develop annual budget and projected target for each national vendor and assist them with achieving projected annual savings - Evaluate and streamline existing processes and implement new processes to reduce costs - Present trends and cost containment opportunities, recommend action plans, and assist with the implementation of those plans - Assist health plans in understanding the rules, regulations and processes around cost recovery - Monitor other departments’ performance and processes and evaluate for cost recovery - Compile and Present reporting packages for Senior Management on current cost avoidance and cost recovery initiatives Education/Experience: Bachelor’s degree in Accounting, Finance, Healthcare Management, related field or equivalent experience. 6+ years of data analysis, finance or accounting experience. Experience with government programs auditing, and compliance monitoring programs preferred. Project management experience preferred. Pay Range: $107,700.00 - $199,300.00 per year Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act
Role Description As a Risk Strategist on the Financial Crimes Risk Strategy team, you will own Stripe's global screening programs — spanning sanctions, PEP, and negative news — setting the standards that govern how screening risk is managed, designing and driving the controls that operationalize those standards, and ensuring they remain effective as Stripe's products and the regulatory landscape evolve. Being effective in this role means going deep on both the domain and the data — we don't separate the two. You will partner closely with Product, Engineering, Data Science, Compliance, Legal, other Risk Strategy functions, and Operations to ensure screening considerations are embedded in every product and market decision. Beyond protecting against risk, you will drive innovation in how Stripe approaches screening — staying ahead of regulatory change and pushing the boundaries of what effective, scalable financial crime risk management looks like at a global payments company. Responsibilities - Lead Stripe's global sanctions and AML screening strategy — setting the standards that drive screening control design and infrastructure development, and translating requirements across OFAC, EU, UN, OFSI, and other applicable regimes, PEP screening, and negative news screening into actionable first-line programs and controls. - Own the design and ongoing improvement of financial crime controls, including sanctions screening, PEP screening, negative news screening, and digital asset-related safeguards; continuously improve detection coverage and control performance as Stripe's products and the threat landscape evolve. - Embed screening risk requirements into product and infrastructure roadmaps — ensuring financial crime considerations drive product launches, market expansions, and platform decisions across Product, Engineering, Data Science, Compliance, Legal, and Operations. - Drive screening infrastructure and tooling forward by owning requirements, leading execution, and maintaining effectiveness metrics for screening systems and controls; build with observability by design — ensuring KPIs, KRIs, and monitoring thresholds are defined from inception. - Continuously assess and improve screening controls and systems — identifying gaps, recommending enhancements that strengthen detection effectiveness and anticipate regulatory or ecosystem changes, and leading delivery of those enhancements end-to-end. - Champion a technology-forward approach to financial crime risk management — leveraging AI tools, self-serve data analytics, and model governance best practices to improve how risk is detected, monitored, and managed at Stripe. - Stay informed on industry practices and regulatory developments; represent Stripe's sanctions and AML programs to regulators, bank and network partners, and external auditors. Qualifications - 7+ years of professional experience in Financial Services, Payments, or Fintech, with at least 5 years in a related role (risk, compliance, or product enablement). - Deep subject matter expertise in global sanctions compliance, including hands-on experience with OFAC, EU sanctions regimes, UN Security Council designations, OFSI, and other major global frameworks. - Demonstrated strong understanding of screening program design and control execution. - Strong AML screening expertise — proven ability to design, implement, and operationalize PEP screening and negative news screening programs in complex, multi-jurisdiction environments. - Proven ability to design, implement, and operationalize financial crime standards and controls in complex, global organizations. - Familiarity with model governance concepts — including model documentation, performance monitoring, and validation — and experience leading or contributing to model governance activities. - Technology-forward mindset — experience leveraging AI tools, automation, and advanced analytics in a risk or compliance context; aligned with Stripe's commitment to integrating AI across all functions. - Demonstrated experience developing risk solutions and working closely with cross-functional teams to translate them into enforcement. Preferred Qualifications - Experience leading transformative AML, Sanctions, or Transaction Monitoring initiatives, including global screening program design or transformations (e.g., vendor selection, watchlist management, false positive tuning). - Proficiency with SQL and ability to independently mine and analyze data to develop risk insights and inform strategy. - Experience with crypto or digital asset products and their associated financial crime risk and regulatory considerations. - Advanced degree or professional certifications (e.g., CAMS, CGSS, CFCS) considered a plus.
Senior Manager, Governance Operations
American Academy of DermatologyThe American Academy of Dermatology was founded in 1938. With a membership of over 17,000 dermatologists; The American Academy of Dermatology represents almost
Senior Manager, Governance Operations Location: Rosemont United States Salary Range:$140,649.00 To $161,745.00 Annually Full Time Job Description: The American Academy of Dermatology is seeking a Senior Manager, Governance Operations located in our Rosemont, IL. office responsible for providing leadership and direction on the Academy's governance operations. Manage programs and activities for the American Academy of Dermatology (AAD) and American Academy of Dermatology Association (AADA) Board of Directors and Officers. Responsible for implementing, performing, and coordinating a variety of complex assignments for the Governance Team. Collects, compiles, and analyzes data and information into straightforward written results. Oversees operational issues for the Governance Team. Serves as a backup to the Director, Governance. About Us: The American Academy of Dermatology (Academy), founded in 1938, is the largest, most influential, and most representative of all dermatologic associations. A sister organization to the Academy, the American Academy of Dermatology Association is the resource for government affairs, health policy and practice information for dermatologists, and plays a major role in formulating policies that can enhance the quality of dermatologic care. With a membership of more than 21,000 members worldwide, the Academy is committed to: advancing the diagnosis and medical, surgical, and cosmetic treatment of the skin, hair, and nails; advocating high standards in clinical practice, education, and research in dermatology; and supporting and enhancing patient care for a lifetime of healthier skin. Responsibilities: - Develops, interprets, and implements approved policies and processes for the Governance Team and collaborates with the Director and Senior Manager, Governance Structure. Assists the Director with recommending and determining appropriate strategic and financial goals that relate to the department and the overall Academy mission. Develops and implements programs to fulfill these goals. - Implements best practices and project management principles to streamline AAD and AADA operations, ensuring that governing documents are maintained, and the tasks mandated by the Bylaws, Administrative Regulations, Governance Policies and governing entities and Officers are accomplished in a timely and efficient manner in accordance with AAD and AADA policy. - Plays a leading role in developing the departmental budget and monitoring revenue and expenses, including providing rationale for budget variances and recommending budget changes. Oversees expense reporting processes and coding. - Develops a working understanding of the programs of the Governance Team and serves as a go-to person when the Director is out of the office or unavailable. Manages and mentors the Manager, Governance and Project Coordinator. Coaches them in proactively identifying improvements to processes and procedures. Oversees program management timelines to ensure updates reflect the process improvements. - Tracks and facilitates Governance Team Action Plans and initiatives to ensure milestones are met and information is shared appropriately. - Facilitates the coordination, compilation, and follow-through on Board of Directors meetings/conference call materials, providing review of documents created by the Manager, Governance, including logistical letters, checklists, electronic response forms, transmittal emails, and expanded agendas. - Serves as a subject matter expert for the Academy's database systems and oversees the management of the rosters for all governance entities. - Ensures the officers and directors are apprised on a quarterly basis what they have financially contributed to the AAD and AADA year-to-date. Assist with Board of Director meetings, as required. - Manages and performs special projects as requested; including, but not limited to, research and address member inquiries and corresponding appropriately, investigating questions related to historical data, maintain, analyze, and implement recommended improvements to processes, maintain project management timelines. Requirements: - Bachelor's degree or certification in association/non-profit management, or equivalent experience in association/non-profit program administration with minimum 8 years' experience working within association/non-profits. - Minimum of 4 years of people management or leading, training, coaching non-direct reports. - Ability to handle difficult and stressful situations with professional composure. - Attention to Detail - Able to consistently complete work accurately and locate errors of others. - Business Knowledge - Demonstrate awareness of business functions and how business decisions affect financial and non-financial work results. Understand how each section of the business interrelates with others. Experience creating and managing budgets. - Collaboration - Participate as an active and contributing member of a team to achieve team goals. Work with other team members (internal and external) outside the line of formal authority. - Communication - Apply effective verbal, nonverbal, and written communication methods to achieve desired results. Respond knowledgeably and professionally to standard business correspondence. Demonstrate sufficient business vocabulary to communicate effectively. - Computer - Intermediate with MS Office skills (Outlook Word, Excel and PowerPoint). - Continuous Improvement - Able to recognize and recommend ways to improve program efficiency and effectiveness. - Critical Thinking - Able to analyze complex information and develop plans to address identified issues. - Decision Making - Able to exercise discretion and independent judgment to understand issues, identify problems and opportunities to determine the appropriate course of action. Demonstrate sound decision-making skills with an increasing number of alternatives to be reviewed by management. - Dependability - Able to follow through on assignments and instructions in a reliable, trustworthy, and timely manner. Responds productively to requests for service and assistance. Self-starter and highly motivated. - Goal Implementation - Ensure goals are converted into actions; obtain results despite conflicting priorities, lack of resources, or ambiguity. - Influence - Ability to successfully develop and manage relationships at all levels of the organization and influence a variety of stakeholders. - Integrity - Demonstrate personal integrity in all interactions. Ability to maintain confidentiality. - Negotiation/Contracting - Organize, prepare, monitor, and evaluate work performed by vendors and consultants. Ability to write requests for proposals; analyze and assess vendor proposals; and monitor compliance to contract specifications. - Strategic Orientation - Uses a big picture focus in decision making, accept some risk and uncertainty. Effectively manages change, anticipates problems, and develops contingency plans. Share the big picture with others and how it impacts them and the organization. - Culture - Effectively manages change and demonstrates flexibility in supporting the evolution of the Governance department and structure. We offer a competitive compensation plan and benefits package including medical/dental/vision/life insurance as well as a matching retirement contribution, tuition reimbursement, bonus program, pension plan, paid vacation/medical/personal days, work-life balance, recognition program and casual work environment. More information about our compensation and benefits can be reviewed on the detailed job ad on our website. The Academy offers a hybrid work environment; providing time in the office for in-person collaboration and the opportunity to work remotely for focus time. We are building a workplace where our employees are excited to come to work every day because of the culture that we are creating together - one of respect, transparency, and collaboration. A workplace in which we demonstrate care and commitment, celebration, community, and focused learning that contributes to the mission of advancing excellence in dermatologic care.
Risk Solutions Technical Manager - Construction
The Hanover Insurance GroupFor more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture.
Role Description Our Risk Solutions team is currently seeking a Technical Manager with expertise in construction / builder’s risk. This role reports to the Marine Technical Director and supports the Risk Solutions Field, the Technical Director Team, and both Core Commercial and Marine business units with a specific focus on construction industry exposures within the applicable lines of business. This includes but is not limited to: - Property - Liability - Worker’s Compensation - Commercial Auto - Builder’s Risk - Contractor’s Equipment coverages In this role, you will: - Partner with our underwriting and technical director group to strategically participate and contribute to new/existing class of business strategies analyzing inherent exposures and required controls. - Support construction and related industry technical skill development training of our field consultants. - Work closely with technical director team and corporate underwriting to participate in appropriate projects to improve skillset development, best practices and guidelines, support corporate underwriting initiatives, and address emerging issues and trends. - Support the field in quality reviews and technical account consultation to ensure execution of best practices and survey quality standards. - Collaborate with Industry Leadership, Corporate Line of Business Underwriting and Claims. - Monitor and develop action plans for emerging construction industry trends. - Collaborate with the Technical Director and Field Operations Leaders to ensure Risk Solutions field staff possess technical skillset necessary for risk assessment and service for the construction industry. - Support development and maintenance of Risk Solutions internal technical construction related resources. - Support and collaborate with technical director team on developing/managing innovative solutions and technology to support risk reduction in all construction industry verticals. - Attend industry conferences, professional development seminars/webinars, etc. to maintain a high-level of technical skillsets and pulse on industry trends. Qualifications - At least 10 years Risk Solutions/Loss Control field experience with a commercial lines national/regional insurance carrier. - Professional loss control certification preferred to include CSP, CHST, CRIS, CIH, PE, CPCU, ARM. - B.S. degree or equivalent work experience preferred in a related field to include construction, health and safety, science, engineering, or risk management. - Motivated self-starter with demonstrated initiative; ability to work independently with minimal direction. - Strong to exceptional communication skills, both verbal & written. - Strong to exceptional analytical & problem-solving skills. - Demonstrated project management skills. - Ability to work in a dynamic environment on multiple projects, tasks, or assignments. - Results focused. - Possesses a superior consultative skillset necessary for risk assessment and service. Requirements - Ability to use a personal computer and other standard office equipment. - Ability to work in a fast-paced environment. - Ability to travel as necessary. - Ability to sit and/or stand for extended periods. - Ability to walk through customer buildings and facilities. - Ability to climb a ladder to various heights and maintain balance while performing work tasks. Benefits - Medical, dental, vision, life, and disability insurance - 401K with a company match - Tuition reimbursement - PTO - Company paid holidays - Flexible work arrangements - Cultural Awareness Day in support of IDE - On-site medical/wellness center (Worcester only)

