Director Of Information Security - Remote - Remote Eligible

Director Of Information Security

For those who want to invent the future of health care, here's your opportunity. We're going beyond basic care to health programs integrated across the entire continuum of care. Join us to start Caring. Connecting. Growing Together.

The Director of Information Security is responsible for safeguarding internal information systems, networks, databases, and web-based security. This involves monitoring, evaluating, and maintaining systems and procedures to ensure their integrity. Key responsibilities include conducting vulnerability assessments, monitoring for potential system breaches, and responding to alerts from information security tools. Additionally, this position involves reporting, investigating, and resolving security incidents, as well as recommending and implementing changes to enhance system security and prevent unauthorized access. Researching security trends, new methods, and techniques used in unauthorized data access is also essential to preemptively eliminate the possibility of system breaches. This role may oversee both internal and external systems security, including cloud services, and ensure that customers and users have the appropriate access to the right systems at the right times.

You'll enjoy the flexibility to work remotely from anywhere within the U.S. as you take on some tough challenges.

Primary Responsibilities:

• Develop and execute the security engineering and operations strategy aligned with organizational goals
• Lead, mentor, and grow a high-performing security team
• Collaborate with senior leadership to integrate security initiatives into business processes
• Design, implement, and maintain technical security controls across the organization
• Ensure the effectiveness and efficiency of security measures through regular assessments and updates
• Oversee the development and implementation of threat detection, monitoring, and incident response strategies
• Lead incident response efforts, including investigation, remediation, and reporting
• Conduct regular risk assessments and vulnerability scans to identify and mitigate security risks
• Develop and maintain Security Engineering & Operations metrics and reporting to senior and executive teams
• Develop and enforce policies and procedures to manage and reduce security vulnerabilities
• Maintain existing Authority to Operate (ATO) certifications and secure new ATOs to support business growth
• Ensure compliance with federal security frameworks (e.g., NIST 800-53/171, FISMA, FedRAMP, CMMC) and other relevant regulations
• Stay updated with the latest security trends, threats, and technologies
• Implement continuous improvement practices to enhance the security posture of the organization

You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.

Required Qualifications:

• 10+ years of experience in information security
• 6+ years of experience in a leadership role
• 5+ years of experience in managing security engineering and operations teams within a federal contracting environment
• 3+ years of experience in managing Certifications
• United States Citizenship
• If you are offered this position, you will be required to provide extensive personal information to obtain and maintain a suitability or determination of eligibility for a Confidential/Secret or Top Secret security clearance as a condition of your employment

Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field
• Certifications such as CISSP, CISM, or equivalent

As a requirement of UnitedHealth Group's contract with the Department of Defense, this position requires U.S. citizenship and proof of favorable adjudication following submission of Department of Defense eQuip Form SF86, (the National Agency Check Legal and Credit or NACLC). Successful completion of the NACLC process is a requirement for continued employment in this role. NACLC processing will be initiated by our TRICARE Security Officer post-offer and can take 3-6 months for a final decision communication from the Department of Defense. Candidates will be allowed to begin employment with UnitedHealth Group in this role based on an interim clearance, and final results will be communicated as they are received. Failure to obtain final NACLC approval will result in termination from this role.

All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.

Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $132,200 to $226,600 annually based on full-time employment. We comply with all minimum wage laws as applicable.